last executing test programs: 11m18.901402003s ago: executing program 32 (id=76): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000000010104003a0000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x80000) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x61680, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 11m5.734149625s ago: executing program 33 (id=175): eventfd2(0x4001, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f00000007c0)=[{0x0}], 0x1) write$cgroup_pid(r1, &(0x7f00000031c0), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@usrquota}, {@errors_continue}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) fcntl$setpipe(r3, 0x408, 0x7) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000081, &(0x7f0000000780)=ANY=[@ANYRES64=r3, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r7 = dup(r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYRES16=r5], 0x0, 0x56, 0x0, 0x0, 0x7fff, 0x10000, @value=r3}, 0x28) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="20680000273662cde1a9e0fb62101a34ebf166905ca859f1131caad32facf0ca9035de321dbedf08e753f37dcd58eddd863e311c7917d6095fd0b2d888ab4197cb8c83cae9dadac0427c53e1a8da51b31a0297e8a460fbee5db7ee55f97577497530a2e5d5f5b4ef13ea4b107214338a7ba1f90bab8272a6968650a0799daedcc9486a40e48802be", @ANYRES16=0x0, @ANYBLOB="e53729bd7000ffdbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4044841}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) 11m2.623885612s ago: executing program 34 (id=192): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20) syz_clone3(0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xfffffe07}], 0x1, 0x0, 0x18}, 0x0) 10m10.331861753s ago: executing program 35 (id=524): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x200000000000005e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x6, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@multicast2, @multicast1}, &(0x7f00000005c0)=0xc) 9m18.077939174s ago: executing program 36 (id=872): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syslog(0x2, &(0x7f0000000000)=""/49, 0x31) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c4030002000921001000012207000905810300000d0040884e73ef4ba4408eec176913a8c1281b0c5009c4e0364f8d539fbb04ec935ed879323665d213935ba4b760968688460349afd12693b2be311361ea8a3f45cd3bc44906070212480029d288d40d7630d312fee37ac1f20139284cae0d9ab429ebfa84d428d3702dfe06ee43632fcf"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x6f53af668eebfed7, 0x20, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0xa3ec}, 0x18) 9m14.462249129s ago: executing program 37 (id=897): bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x38, 0x1000002, 0xe643, 0x17, "e30400"}) r2 = syz_open_pts(r1, 0x0) r3 = dup(r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/228) pwritev(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\x00T', 0x2}, {&(0x7f0000000640)="685114cc8fd5340cd1650946", 0xc}], 0x2, 0xffffffff, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2c, 0x800000000004, @thr={&(0x7f0000001b00)="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", &(0x7f0000000740)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000240), &(0x7f00000002c0)=@v2={0x2000000, [{0x9, 0x9}, {0x7, 0x6}]}, 0x14, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000600)=0x40400001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) listen(r0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001740), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000680)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt\x00\b\x00\x00\x00\x00\x00\x00uni_xlate=1,showexec,flush,shortname=win95,nonumtail=0,rodir,utf8=0,shortname=mixed,umask=00000000006,\x00'/153], 0x1, 0x26c, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d9) 8m5.494189875s ago: executing program 38 (id=1378): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000200"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r7, 0x1) ppoll(&(0x7f0000000040)=[{r7, 0x4}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7m55.268246891s ago: executing program 39 (id=1442): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r1 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 6m20.273878075s ago: executing program 9 (id=2033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc219, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "f281d724"}, @main=@item_4={0x3, 0x0, 0xb, "90171f4e"}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x9}, 0x94) 6m17.502416948s ago: executing program 9 (id=2048): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m17.479289128s ago: executing program 9 (id=2049): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}], 0x4}}], 0x1, 0x2040000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x328000, 0x800}, 0x20) 6m17.36157123s ago: executing program 9 (id=2051): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0xc618, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy6H+ht1V38wF3KqgdPmiZpyG6SKU2a1p48eBQP/iei4Mmjf4MHz97Eg+JNUDLvVLe6gtC0sdvfDybPzDtvnnneUArPTEgAJ9Zi9uvPlbgU5yJiPiIuRhT7lXIr3E7hhYi4HBFzj22VcvzPgdMRcT4iLk2Sp5yV8tTnV8dXbv701i/ffHfm1IUvvv5+dqsGZu3FiOhvpP3tfop5J8WH5Xhj3C1i/8a4jOlE72w638/T+HZ7rciw3dib1yji9U6an29sDSdxvddoTmKnu16MbwzSBYfjzl6e4g0PG5vFcau9VsTuMC9iZzddd2c3/W/bHY5SnlaZ76MifYxGezGNt3faaT0bj4rYHIzK8ZQ3b7V3JnFcxvJy0cx7raKOtQN80P9zb3cHWzvZuL057OaD7Gat/lKtfqta38xb7VH7RrXRb926kS11epNp1VG70b/dyfNOr11r5v3lbKnTbFbr9WzpTnut2xhk9Xrteu1a9eZyuXc1e/3+e1mvlS1N4qvdwdao2xtm6/lmlt6xnK3Urr+8nF2pZ+/cW81WH9y9e2/13Q/uvH//lXtvvlZO+kdZ2dLKtZWVav1adaW+fILW/0lZ9BTXDwdSmXUBAMeP/h+YhYP0//1H5fET+//NBxGH3/+H/n8qjlX/e9L7/0NYPxyI/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MT6YeHLN4qdxXR8oRx/phx6rjyuRMRcRPz+BPNxel/O+TLPwr/MX/hbDd9WosgwucaZcjsfEbfL7bdnD/tTAAAAgKfXVx9f/ix16+llcdYFcZTSTZu5ix9OKV8lIhYWf5xStrnJy/NTSlb8fZ+KnSllK25gnZ1SsnTL7dS0sv0n8/vC2cdCJYW5Iy0HAAA4Evs7gaPtQgAAADhKn866AGajEnuPMveeBRffvP/rgeC5fUcAAADAMVSZdQEAAADAoSv6f7//BwAAAE+39Pt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8wc793CYORHEAfjZ4Yf9p0Wrv28reoIwtIcccIwpIExSQAzWkAWogt5QQQYTHIRBxiOSxrUTfJzmTscyPNwgOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJceqnUVN39v2+bs9u3kGQ0AAABwybZaL+p/Zqn/vbn/s7n1u+kXEVFGxKW5+yi+nGWOmpzq9fm70+erNzXcR9QJh/eYNNe3iPjXXE+/uv4UAAAA4PPaLFfzNFtPf2ZDF0Sf0qJN+eN/prwiIqrZY6a08pD3J1NY/f0ex3WmtHoBa5opLC25jXOlvUv9cz+u2k1PmiI15cWXHYvMNnYAAKBHo7Om31kIAAAAfboaugCGUcTLVuZxK3CSmmZ77+tZDwAAAPiAiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxcz8vclNxAMBfksnUVsVxlTmsiIIHvdjptLb2Jh6UxYN/grBsp3Xt1B/tHmwp4l68yZ57ET2KCMp66//Qcwu91FsPc6ggHkeSSWbSdtFZwSTd/Xzg5X0TQt73JbDsNy+7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCavLuIk2zTm8Vxcez2g+sbWX/nkT5zc+fuatayOKoz6SfDy9WdqN9cIgAAABweSVnfhxDupbtrWR/38vo/Lc/Jav7vn53FZT3/aN1f9mXtn7Xffr3/4nyg3myc7KLnN8ejE4+n0vn/Ztluz/3rGZ38zufvXpL8gcQfbL8wSfP7GX1769Z73Tw8Uke2AMB/cbzsi6D8fSjrh00mBsCh0akU3mX9n/SazQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgDpPt8HQZRyGE1c4iztx5cH1jr/7mzt3Vsp25cWMnfL24ZnaJNIRwfnM8OlHrbNrtytVrF9fH49Hl+oNXQghNjf5OMf2LHy1xcgiN3J/9B3+1I422BXHxsNuSz5MRNPhDCQCAAyktWlbX30t317Jj0UoI0x8erv9fr8Rhyfr//sdnblfHqtb/w9pm2H6DrUufD65cvfbm5qX1C6MLo0/fOjl8e3jq7OnTZwf5u5KBNyYAAADs23Q6nc53ukWr1v/xyuPr/8cqcViy/v/iu+FX1YET9f+eFot+TWcCAABwuD3/6p9/RHscj7rd8OX61tbl4Ww73z852zaQ6r4dKVq1/k9Wms4KAAAAqMNkO3po/f9cJQ5Lrv8/8+NLP1evmYQQjhbr/8c3Phufq286rVbHnxM3PUcAAACadbRo1fX/NP/+P55/8hCHEN54bRYX/wbwH+v/tKj/k/e/+ak6VvX7/1P1TbGV4v7sfuR9P4ROv+mMAAAAOMieKlpW7P+e7q598suxD7u+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo298BAAD//y5wQIQ=") writev(0xffffffffffffffff, &(0x7f0000003740)=[{&(0x7f0000001440)="64656e793b04", 0x6}], 0x1) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x8054) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x100000d0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r5, r5, 0x1a) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) 6m14.993651926s ago: executing program 9 (id=2066): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$inet6(0xa, 0x80002, 0x88) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 6m14.524927454s ago: executing program 9 (id=2069): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 6m14.495498264s ago: executing program 40 (id=2069): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 4m24.721490015s ago: executing program 4 (id=2601): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r3 = syz_open_dev$evdev(&(0x7f0000001180), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x1, 0x8eaa, 0xfffd, {0x0, 0x1}, {0x52, 0x2}, @const={0x40, {0x4d, 0x5, 0xe00, 0x8}}}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 4m23.785376349s ago: executing program 4 (id=2605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000a00)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3\a\x00\x00\x00\x00\x00\x00\x00iDe', 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x5, 0x5, 0x5}, 0x38, [0x9, 0x3, 0xa, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x3b, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x5, 0xfffffffb, 0xbeb, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0x4000e, 0xd76, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x400005, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x4, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x0, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0x7, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0xc, 0xe, 0x5, 0x7, 0x6, 0x1000002, 0x1, 0x1, 0xb, 0x26, 0x200, 0x3], [0x401, 0xc584, 0x4, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x89b2, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0x1000, 0x2, 0x10, 0x9, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x40, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x7, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x761, 0xb, 0x402, 0x800, 0xc4a, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x7, 0x1e0, 0x4, 0x2000e47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x5, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x1208a8, 0x2, 0x3d, 0x7, 0x2, 0x6, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xa1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0x2000000e, 0x2, 0xd, 0xf, 0x133, 0x6]}, 0x45c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @mss={0x2, 0xff}, @sack_perm, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) sendto$inet(r4, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) 4m22.43761208s ago: executing program 4 (id=2610): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="0b036800e0ff64000200475400f6a13bb1000000080088a84803cd91672119043958689e994058b575c33c164676b337cc4268e32e71e3669b476fbc592ead0150bd654962f6e50bd4a4218f183ae8ceb3ebca44a9b32e7d8ea8627d3144d28dfa977d5c610fb2e131aa72a9acf17019ec0f2dbaba", 0x75, 0x1, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 4m22.357271041s ago: executing program 4 (id=2611): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f657874656e745f63616368652c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474720000693a653d3078303030303030303030303030303766662c736d61636b6673726f6f080000006673f52b00e58abba2d0cc27be339f6f4fe5ad35a724e1531a622f050000008586eb5ba3614d2c24abf5a2614c0f111e057112dafd66336a5e3b6512b81cda80be6e9a34ccc2b88c0100008000000000e3f5def862b95c20ee847008000b0c22653d2ff39b36732e46b56357afe57094f42ba61c5e8b4e184d7dd50000000000000000c0469264c247cd3c7fcb39043dda97538456bc294ae31e525d3b664cf8e83b52b1885b866b58698b3f132aced62a4fc7c8c400b805173d7488a35708d2523190c0014689f57be6ee3f5d28935a0000000000000000000000000000000000000059c1403d010001008ab61fa90695a8b268c277645c1e357ec9316354f659d4244fe126a8364eaa0de6bf4ba21c767782a04bdbb8c86d0cc7e3f03f8ef15c0ee311768cccb8affb0ae5d7cd0000000097676c046a6c754c98dd5f400ad99a588d983ae6e07b4e0e0907266aca53b30a815a84295fb5eab2f263613d36994dc15562892c33ed149270907e9c2e4d0cac7dd9735621a0c6768d4f70c664699157854bb1b85ce3f6ea44456e4f1ae1575315d77f2b995ce4d6ce21b17ca891c155ddd9916e997c32e78231e8d54675e4edf480980023b9736180ff98cf93f888eb70abb728b7e91a5d75b7e43e54f92b6e679249576f12533bef1c93aa993977f15c0a7b595423444db6e87480c46c408f6d48afa1ba"], 0x1, 0x5514, &(0x7f0000005d80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xcb3e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES64=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x8040) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000002000/0x1000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r6, &(0x7f0000012380)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000700000000000009209500000000000000f7315374ce569ec55869bfbcfa7c4e8f52e6288f2fbc43a3af3c6b881320c24423492f2fc14c9de730f42434dfa11c77edc1f06776d8"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x6}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x44) timer_create(0x1, &(0x7f0000000280)={0x0, 0x1d, 0x1, @thr={&(0x7f0000000780)="41e5d1d9a2fb1e21392a002b0b8d724f5a67247e7746344ac9eb69a82e38996c89c4d7c4699016dc98cdc8c11f990ea3a30b020b25d2d749ccc18d1bc42cde55e4d19647749d1aa10bd03f44fad1af83b421d64fcc1232942c33e3d50afccb", &(0x7f0000000880)="388e6532803bb9b1aea3d90893acfed08d37903e7b40c9904ee18e837e9d0216478f3d063d8310bb83ad6acd9ad524faae202c71215ffadc13c5c7ae7edb6e2003bc819b625cabcc74416ff77579d70f192dbfff06a8547b5912e0919e39d2f4d72bee0b01ecbfcb8611da56c5d22f855989e886f306e756f88d8551b3dd3897b671d194c98a2491f4b9dfbbee328e428e9480535a945df1a3149458109d635bbd643a8c18bc228987f79e7712b3d0300691be1d"}}, &(0x7f00000002c0)) 4m21.733383451s ago: executing program 4 (id=2614): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121500000000009500004000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") 4m20.599232228s ago: executing program 4 (id=2619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000002840)=ANY=[@ANYBLOB="01001d0000000000029078ac1e0001e000000111009078e0000001005bb6852ecfbac53966e81d69b3dab3778a7d92a75ab1f963dce3f30b16e649827802571f12cb7c2f356e2310e929784f7587328535c82a03b2d867e33c00316c94c0c5ea8a579aac5605804f679776c6e9e7af224b80d627d5bc37cfc60cef588c56da460961d8b760e35fc808638dfa45d490b5048a6e35468a888b26d6fa1438dd4a4d41970abc6a055039cb8e0cd166a1e7ee1c29c32e238b18d3be362451c759a7e5239e6f5eba8aa061598982"], 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="780100001a00330600000000000000000a010101000000000000000077000000ffffffff000000000000000000000000000040004e2480010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414020000000000000000000000000000000032000000fe80000000000000000000000000000b23030000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2200000000ac1414bb0000000000000000000000001c00040002004e21000000000000000000000000000000000000000008000b0007000000"], 0x178}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') write$P9_RWSTAT(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f000083ef55aa9955f6c4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000feffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000007b36e6e1d2fbd7015ab75f0cbae968d249addc763a29b4320"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r8, &(0x7f00000002c0)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) 4m20.232331493s ago: executing program 41 (id=2619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000002840)=ANY=[@ANYBLOB="01001d0000000000029078ac1e0001e000000111009078e0000001005bb6852ecfbac53966e81d69b3dab3778a7d92a75ab1f963dce3f30b16e649827802571f12cb7c2f356e2310e929784f7587328535c82a03b2d867e33c00316c94c0c5ea8a579aac5605804f679776c6e9e7af224b80d627d5bc37cfc60cef588c56da460961d8b760e35fc808638dfa45d490b5048a6e35468a888b26d6fa1438dd4a4d41970abc6a055039cb8e0cd166a1e7ee1c29c32e238b18d3be362451c759a7e5239e6f5eba8aa061598982"], 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="780100001a00330600000000000000000a010101000000000000000077000000ffffffff000000000000000000000000000040004e2480010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414020000000000000000000000000000000032000000fe80000000000000000000000000000b23030000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2200000000ac1414bb0000000000000000000000001c00040002004e21000000000000000000000000000000000000000008000b0007000000"], 0x178}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') write$P9_RWSTAT(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f000083ef55aa9955f6c4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000feffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000007b36e6e1d2fbd7015ab75f0cbae968d249addc763a29b4320"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r8, &(0x7f00000002c0)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) 3m36.867250177s ago: executing program 3 (id=2864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4e4, &(0x7f0000002d40)="$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") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x0, 0x5, r2}]}, {0x4}, {0xffffffffffffffae}, {0xc}}}]}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000d3d2cf219cca201dd3ae13b5d2258e006100000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b94113fdbe000000000000000000", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setgid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000040)='./file0\x00', 0x88) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000b00000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_context(r8, &(0x7f0000000400)='u:object_r:app_data_file:s0:c512,c768\x00', 0x26) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r10, 0x40e, &(0x7f00000000c0)=0x3) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3m35.680238556s ago: executing program 7 (id=2869): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@var={0xa, 0x0, 0x0, 0xe, 0x5}, @enum64={0xd, 0x3, 0x0, 0x13, 0x1, 0x1, [{0xb, 0x2, 0x5}, {0x6, 0xfffffff7, 0x3}, {0xb, 0xc6, 0x5f}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x5}]}]}, {0x0, [0x2e, 0x5f, 0x0, 0x2e, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000300)=""/172, 0x75, 0xac, 0x1, 0xfffffff5, 0x10000}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x3f, 0xfe, 0x7, 0x30, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x40, 0x8, 0x5}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x68a, 0x6, 0x4, 0x880, 0x1, 0x1, '\x00', r1, r0, 0x4, 0x0, 0x5, 0x7}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000180)={0x30}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="38010000100013070000080000000000ffffffff000000000002000000000000fe800066bfda7789fd12600000000800"/64, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES16=r1], 0x138}, 0x1, 0xe}, 0x0) 3m35.567799057s ago: executing program 7 (id=2870): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x340, 0x0, 0xb8, 0x0, 0xb8, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3f}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge_slave_1\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="8510000001000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500200086000000"], &(0x7f0000000180)='GPL\x00', 0x701016cc, 0xf3, &(0x7f00000002c0)=""/243, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0xd, 0x101, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x3, 0x1, 0x9, 0xb}, {0x3, 0x3, 0xf, 0xc}, {0x4, 0x4, 0xa, 0x2}, {0x1, 0x2, 0x8, 0x7}, {0x0, 0x2, 0xd, 0x5}, {0x0, 0x4, 0xd, 0x6}, {0x0, 0x1, 0xf, 0x4}, {0x3, 0x4, 0xe, 0x2}, {0x1, 0x4, 0x9, 0xa}], 0x10, 0x58e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='fsi_master_acf_cmd_abs_addr\x00', r2, 0x0, 0x1000}, 0x18) fspick(0xffffffffffffffff, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1) userfaultfd(0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000009c0)=0xe8) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000020c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, @loopback, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x0, 0x0, 0x9}}) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)={[], [{@euid_lt={'euid<', r3}}, {@hash}]}, 0xff, 0xbbd, &(0x7f00000017c0)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x108) pwrite64(r5, 0x0, 0x0, 0x8080c61) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@empty, @local, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x1, 0x0, 0x1}}, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x1f, 0x2, 0x0, 0x0, "0c1b3dc73c96ad47702767af93a93cecd76675136febdb845e68ecaf4c2f0100165ec7b240fe33f45e590704dcc200c4e201eddecc68c559d87635594fb36fc1"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0x3ce, 0x7, 0xb63, 0xb47]}) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m35.531657048s ago: executing program 3 (id=2871): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800157fff000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$TIOCGSOFTCAR(r0, 0x4b46, &(0x7f0000000140)) 3m35.36793665s ago: executing program 7 (id=2874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x0, 0x4e1ee79f, 0x0, 0xf0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) eventfd2(0x5, 0x40001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, r4, 0x6, 0x100000000, 0x6, 0x2d1}) 3m35.314384541s ago: executing program 3 (id=2875): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) 3m34.340240436s ago: executing program 7 (id=2880): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000008020000210000000c000000", @ANYRES32, @ANYBLOB="5e46da262dd9512972dafffffff500000000000000001400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) waitid(0x0, r6, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18fd000000000000000000000000340018c7621f80aff4087487a76716120000", @ANYRES32=r3, @ANYRESDEC=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) sendmsg(0xffffffffffffffff, 0x0, 0x44004) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240414, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0xe01, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) dup3(r8, r9, 0x80000) 3m34.08998162s ago: executing program 3 (id=2881): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50a3}}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x3, 0x0, 0x0, 0x100, 0x3efae25b8c3768b2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x9f) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00') 3m33.987962172s ago: executing program 3 (id=2882): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000980)={0x0, 0x0, 0xdc0a, 0xfffffffffffffffc}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) 3m33.171832744s ago: executing program 3 (id=2886): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x8000200d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600000000014060000000000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000580)={0x4, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0xb000, 0x8d, &(0x7f0000000180)=""/141}, {0x4000, 0x3b, &(0x7f00000003c0)=""/59}, {0x4000, 0x29, &(0x7f0000000400)=""/41}]}) 3m33.171226984s ago: executing program 42 (id=2886): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x8000200d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600000000014060000000000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000580)={0x4, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0xb000, 0x8d, &(0x7f0000000180)=""/141}, {0x4000, 0x3b, &(0x7f00000003c0)=""/59}, {0x4000, 0x29, &(0x7f0000000400)=""/41}]}) 3m32.15258064s ago: executing program 7 (id=2890): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500001e0000000025dafff307c0f0b0afa79f3d2662fe8d2c543fd2b9fb5781151b515aee309e5e0d0e4593a5056b1845e8fa2a209742a1a9c41a7b36959a0eb823b5e1ac7d30f99f5741d4dcb8a2c315e82be9dc9a3254468c200e7c59c9ee48e4f4a0f73a5ace23c3df43dbb7907e7b1cac21f34bd0b792e6af7dd8a8d6385541895c20a109d586a78de76a2464ce6c34c19d68d07389c5a3c5a2dc104d334b0b9c1ea13add3a5e65b5db5bff6318bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000001180), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x1, 0x8eaa, 0xfffd, {0x0, 0x1}, {0x52, 0x2}, @const={0x40, {0x4d, 0x5, 0xe00, 0x8}}}) bind$802154_raw(r4, 0x0, 0x0) 3m32.029056041s ago: executing program 7 (id=2891): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x600, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 3m32.009209412s ago: executing program 43 (id=2891): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x600, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 3m10.854591136s ago: executing program 1 (id=2995): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000d40)="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", 0x2000, &(0x7f0000005100)={0x0, 0x0, 0x0, &(0x7f00000006c0)={0x18, 0x0, 0x6}, &(0x7f0000000780)={0x18, 0x0, 0x1, {0x1}}, 0x0, &(0x7f0000000800)={0x60, 0x0, 0x3, {{0x1, 0xffffffffffffff80, 0x5, 0x7f, 0x5, 0x9, 0x10, 0x8}}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x7}}, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x5, {0x0, 0x24}}, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="480000000000000002000000000000"], 0x0, &(0x7f0000004ec0)={0xa0, 0x0, 0x6, {{0x4, 0x0, 0x7, 0x938b, 0x4, 0x4, {0x2, 0x8, 0xa1, 0x0, 0x10, 0x4bb2, 0x40, 0x2, 0x7, 0xa000, 0x1b, 0x0, 0x0, 0x1, 0xf}}, {0x0, 0x10}}}, &(0x7f0000004f80)={0x20, 0xfffffffffffffff5, 0x2000000, {0x80000000, 0x4, 0x7, 0x3}}, &(0x7f0000004fc0)={0x130, 0x0, 0x3, {0x7, 0x8, 0x0, '\x00', {0x2, 0x3, 0x3, 0xfffffc00, 0x0, 0x0, 0x2000, '\x00', 0xf3, 0xffffffffffffffff, 0x200, 0x101, {0x3, 0x6}, {0xe4, 0x35}, {0x8, 0x8}, {0x5}, 0x3, 0x10001, 0x2}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m9.738216213s ago: executing program 1 (id=3001): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 3m8.289028555s ago: executing program 1 (id=3011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 3m7.343623069s ago: executing program 1 (id=3016): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d667266646e6f3d1affba5ce89bcb61c10ec751c499d843cc3b9587a65c2d6680741b67599fb8720878d636290ce8af272a75b05321f150dcb5e78ab15f42360ba476abe4903bf8538c83c2d5f5afef7c66bbe4360c95f8f076f37cdcf69036dffb3ad15c97cc7838e607708696916be3826c2c3958ab0a4b04df14e4f2970f49372de5d2951ed1d6d4212eaf", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f63147dd72d57", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(r6, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x29, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x7ff, {0x3, 0xfffffffffffffffc, 0x4, 0x0, 0x8, 0x0, {0x10000000004, 0x80, 0x8000000000000001, 0xfffffffffffffffd, 0x2000, 0x4, 0x0, 0x2, 0x5, 0x1000, 0xd, r4, r5, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r9, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x1}}, 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xfffffffffffffed3) write$FUSE_CREATE_OPEN(r11, &(0x7f00000005c0)={0xa0, 0x0, r9, {{0x2, 0x4000000, 0x7fff, 0x9, 0xfffffff2, 0xa, {0x5, 0x3, 0x8, 0x5, 0x5, 0x80, 0x8, 0x1, 0x2, 0x8000, 0x6, r12, r10, 0x80, 0x1, 0x9c00}}, {0x0, 0x6}}}, 0xa0) lchown(&(0x7f0000000080)='./file0/file0\x00', r4, r10) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r13}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r14}, 0x18) 3m6.499815403s ago: executing program 1 (id=3020): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x1, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0\x00\b}QmE\xdd\xa69!Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 3m6.463903833s ago: executing program 1 (id=3021): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000084000000000100000100000000000000", @ANYBLOB="00000000fdfffffffffffffff65f5f"], 0x50) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0x32, 0x0, 0x4, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000004c0)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r0, r1, 0xe, 0x2d, r2, @void, @void, @void, @value=r4, r3}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000200)=@x86={0x7, 0x1, 0x7f, 0x0, 0x0, 0x8b, 0x9, 0xa, 0x3, 0x4, 0x5, 0xfa, 0x0, 0x8, 0x8, 0x8, 0x9, 0x6, 0x0, '\x00', 0x20, 0x6}) ioctl$KVM_RUN(r7, 0xae80, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) lstat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x18) 3m6.434082833s ago: executing program 44 (id=3021): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000084000000000100000100000000000000", @ANYBLOB="00000000fdfffffffffffffff65f5f"], 0x50) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0x32, 0x0, 0x4, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000004c0)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r0, r1, 0xe, 0x2d, r2, @void, @void, @void, @value=r4, r3}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000200)=@x86={0x7, 0x1, 0x7f, 0x0, 0x0, 0x8b, 0x9, 0xa, 0x3, 0x4, 0x5, 0xfa, 0x0, 0x8, 0x8, 0x8, 0x9, 0x6, 0x0, '\x00', 0x20, 0x6}) ioctl$KVM_RUN(r7, 0xae80, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) lstat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x18) 10.594247049s ago: executing program 2 (id=3998): pipe2(&(0x7f0000000080), 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 10.568896419s ago: executing program 2 (id=3999): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000200), 0x25, 0x365, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 7.080510162s ago: executing program 8 (id=4011): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="b800000019000100ffffffff00000000e00000020000000000000000000000000000000000000000000000000000000000000000000400000a0000008700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x4000090) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='1-6:5/', @ANYRESHEX=r5], 0x31) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x5, 0x14, &(0x7f0000000240)=""/20, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x1955a, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000780)=[{0x2, 0x3, 0x8, 0xc}, {0x2, 0x3, 0x7, 0x2}, {0x4, 0x2, 0x4, 0x3}, {0x1, 0x1, 0xf, 0x6}, {0x2, 0x2, 0x0, 0xb}, {0x1, 0x1, 0xe, 0xc}, {0x5, 0x1, 0x4, 0x1}, {0x5, 0x1, 0x8}], 0x10, 0x6}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000040000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700002000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='sched_kthread_work_queue_work\x00', r6, 0x0, 0x5b}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x38}, 0x400c805) 5.787493672s ago: executing program 8 (id=4014): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8cb2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x2000000) 5.779688932s ago: executing program 6 (id=4016): socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.333428599s ago: executing program 2 (id=4006): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) write$cgroup_pressure(r1, &(0x7f0000000040)={'full', 0x20, 0x40, 0x20, 0xdb4}, 0x2f) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0xa000000a}) finit_module(r1, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r2, 0x0) accept$inet6(r2, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) 5.21982398s ago: executing program 5 (id=4017): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$tipc(0x1e, 0x7, 0x0) sendmsg$tipc(r2, &(0x7f0000000300)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000640)="15216e47dac2bb9978a4f52fa056858de3da1c1020dadde6e2d6d54745c26747f3cc743ece127ed3c24ab951b24590e9feeed294af1ccd9987504edd67338140e5415ea391f8a4e835ac0aeb3eef463f9df94329e584d9e8ef100e01aea0c2dfc794d25235802f67e150e5dd247f1f94fe8e001757146df29fc018d4183937808a3be4583775588a0ab5b3c6f75fa2e1cade8f3e9ee4e8f8292aa7f58eb895b3b2e5c4abb713a35e051fe4914f39e34f77a8d64f781f84a2251ff831ae2b13368b82cd9be26a6f1b88ec25e10bd8ffeda792018183eef65a1990bc31b47fd48668ecb79aa5ca5c5ae8", 0xe9}, {&(0x7f0000000400)="fa2a1bc543b464aafb47867a0eb49073e568f52bcfb7cd64996f4a88e03763b6081339f6b3c79a6eda91f91de128419a18b009bea75b90fb6debb669a4f4480c5128eae767a7fd250e9e848ade543b11cd177676ba3c5d8d55c8bb20d6e02cd85dbc", 0x62}, {&(0x7f0000000240)="dabc187c3eb4d3", 0x7}, {&(0x7f00000007c0)="82904c453d274e904cedada31d8368609eda9b3f43c73efb74d4f1d9886223fbbb3011fb6ab683542b241a82dcd58d3bd3eb32d8bff01e860ab72b3fd79a3976062b3ca1163d582078b160c237d5081be1c95bade21eb3eaaebab9d776dcc1458a9831", 0x63}, {0x0}], 0x5, &(0x7f0000000940)="12c91f0b123767ac1215385885deda96e9b61ceca3e1aa0f541fbf792ecc397f73176f60f57cd5a1edddd745942ad48553c6bfe5ef674ce9fb65e3ab8e15366ea67f02071b10d33afb978447ebf32c4eda42fa4812cfd7a6b79c752196da38d72c78f10b04d915d92818445fb026cb9386f458b0a66041e3330f3c7cc98652c49cd21b74ae01c1fafa5988170447f1b40a2d246aa2066d72bd014fc118035b137584a424b5f6727c3f0f818205fc8a49b248e30ac9828b3b7476f1061f2fea21b8c6c19e690ab7c63d4d42b926d507f54687da48dd00b01d491381d5dd8e2452587b4d2f3d7630bbc31ac8cbe983f2f536356004d7be8c874f0ac0ca6bcd50c4f4ed0a51fe7767a966c9b963447bab547a32c151b93d4b9e3894e2d33bf04ef51ed5dcfdf77be197b6e72140fd1dc3939904d3a01475515b0ad99471eb5e872e6d867422e01a82122cb0c98da7d59cb17c5a1076ec8405ff0ab264e9e15a3eb52e12a6b1502609ce597f37e4fc28d355b955ba8c23b4e2d48184a83fcc9cdc35377a3d6402ce4b294ada0c618a670bdda2f00e2d42c57737b536b7166dcc02128aea59fcc85ea8e87a98bd683e56b72f0f50e727b5013bb0a38da0cd70b2a0a8cc1aa882e565c2ce02b27166da10097384dcc17dcf7b06227cc0a26edd4058e4cbd4c2ae330fd86f0e679a8c8d08cefcec92f2545b7a1846f91c3b407c49452acb3f5042cd336c6ea502f46f8525a4c6a0b63395e92fb626eb08977bfc48237216eef788c956fc243bb53afb9f033e158f871bf48bd1741cd04332bf4afa29cd4ca84dda97e7127657298d4e1e504d56542d34b2a63a09a3f5407c26b4592baf7a9b6522ae54311714420beac7bcf0276b4bfe4992fa355ded18f966b035a7476d28b5b008f956cfb158c93c6aa1212ffbf75f2ccb4fb8468f2d859b77c0d6b15ca5f82a3d160073cf397ea209991add5485326ccc9f046084efba5343762de3a8015beb01cbdb64c8e7ed51f33c46269d24cb4ee32748f5dd3e2f3bed2dd5a5459f516f7e9075007b05d8a6b5cff46211f03e64b4a08196705e29b28fe91c438091b7a74acef657567a9e403d0793f772af4a1ac4596ee1e59708149e6f475d8c62549d9fa1f5f3742ec1bd51043e6af9f136d4897a744537bd8b178ac4559790ddb7596bbb8c3837990f1b433df05f03acad2598236e618117f3f91b6e1442445f7e332a0de3706dafa3c1a160aea6e23cec1f60faf26aacf71646da16b20ffc4748f6c57392ec440f59f68374c9414b41c9c9255a5561a945cab59bf1cf8fb5701a40474e61e4f659bb2c701371520c6c1ce5ae43150a2534235ffd474e48effa368292d56d5edfbbd4b77b17cce738628d7fa0e49f5ce87127b9edd0717ea0da89cd1d2e5192cfea9fbaa3f80a789654cd9334f6c82a37321b4572b8e27f4c6bed06c35d88fb2f2dc6670946182c9468b96ca9867e9ae5f6480ef3ddaf5f121b312f7f8627719457fde225a7e2cb394edf2418a6c372b4169c9ffea9e80a3ebb9f69e462e983acd249182058c14229833213d38301865472d98b658968bb9f53ee7b59059214647687781fbf34b5f877f56862e034cf78052ba009c5d3c494dac5b6755c1e2e1fe6f3b549192b4297183bd4c73a90633077cea3f1ac4215e9991b60b138d0ad8a3793e806e94824bcea22c07a50f25724737f70869bc3eced728fca39e05a2a4d311eea1cee6eba93ee44c97dc8335b76d82184ec235e390fee129679f6b450b5b2ae915a0fff6d760007551dd575e0c05485167b79aa661d8e7e0aaa34699764b6d525df8c9636047fd7b9a6c8be0debea810ade3729c12df054ba3785ea4682d2473c4a39034d84de691457c87b05afc393eb0ffa4d286b8abd5eb48da73f788cbc526ef30bfafa7c20540a66f85ae1d584d8013c9c41d3e02b7de1cadb5700f3b31793f880db6ae96eb3d4c7e677ac6c8a25e8671cc1174d14950a58d4a8fe39c37ca5482fcdb6caae4e30eaa156ecabfe7e7a9eb1bc1f4f72a68f5472c8fc3f9212e1e20c45c297bfb483209951c57d31af561b2b8c843b1d4cce5ec05f07c83421d13441a528da91efc52c4a07226377f901cefe6b01dce4093d10b4776acfcfa5f9b564aa7ad9b738f0ce585d967f6749832a9eb5de90404ea37eb96c397c81f62aeccbb7d33a742d4dbf3f8fcb8716d36c2dd586313b026a8e14269dc8c0a1fd21ab1e6223bb70f49fd7e2d2b8a98c350cbcb8a4270eac8642a85a4bef4f7d36e31972e37c381ef2557cb8df7294d22f0b50725866e783e3b293622888a83d8e1f1a6930aa8d4dd5035f64c04e4902a6f4435893f69b18ed3afc387acfaa4fb0cdca33560ff7712c3bcecb88be9ad8c1258d526d88563393b01a6d4e2935c31fd63be1da405162452a91dac73bd6cbf89b499dab98b01218b91634fdc74cf6516e8bd0240479a4802d022e396532693ee6a4f9d67fed90074ce45a69ed1519c1122c1096843db0ac43ce73e5ef3973c1513bcb4e4496396971c17ce2952a686e32cb4f5b9f0051bb9f96d6dedfb9ec0792eed9b9296305ae0da8ea8dc0ea7232c1dbe7697475047f33c16f9c76ea458d207fe42d503652e9eb53279784663ae7440c2a2ea42e63c95cb7881b9f7566f8b08e809072fb43c827be141c9548b9b1bca18776d83ea12aab70a04e1209b21bc549db9720fe48845aeda6e69396854ce0f790dd715fb070b5b601e83d62955faa1bf39ee1cd5526bae20d43157bed47b431884deaa9aa3ef9a9744f24ad0ec45c727db4bb6bce430f05e9dbbaeeed5ef11c2408940764e7e09f8de06a5272deb88b4ce771180eaed801ab2c7228af0e861571afa02e3cc1f1ee3a4614ec939460c3e92fe5f6e34000b5967024824b54a35e808de5044abd890a12415fc7d9be895e58d396bd4d201a60f5dda613dbbd3cd4930294bb53cada57af0cf138e37300bf47e945587e4290e839da6b468f3e43852a5f07086f43b843b1be17ecafbd11e2c108bfe57c07481523c297206b91e57c4554cbe7289088674edfa4ab1b26df9228b8b2daa82f3ed10e690eb306d3c7e3abfe5391f3e75b3cc05e8f20cb9209989bb7eb1ee6f2181001f138bb9978791dfe70d700c0aba272c180d7e7abf898278aee356e8c5dd15bd1fcf7613b2ddfc5a327420941d2a374c63724bc95e1a249af1ba4adf49ee3191a5d8bba023fa9ebe25cdee3454a7ca38a6ac74bead49cd983fa05d3c2ecdb5f3c637cd80b6acf419e2981483c0ed1db7cd246ef7ae79e410a193df81d03d3bd08da8d5518484a59835c4c3b3d7b2248995a101052c16235aa13ef25c39fae34c19d210bf9f6a01155cb26f605c11003cd2813de07e1790ed36ff64072e004342547e97f5ae289613d600911a11c9d1ef4037c8328fd7fbf356fb7d095353972f40fca16dedc02c7fb9c2eb75adcf1ae6e855453402753ac11fc35a57ade3a83d345c4ca07109e34c740e64ee742aaa12ba0669fb44906faae716b1ac8e86ab68f57c89199679a1f9e622cd69838cd72a9e305aa7d0176ba5cc4268a8d9bc0495a59cdaa0975d93227217a541daa54e50258bf2019ad5a9c89c4293409002c8ae69fe5b4929f0624266da3b012bb954fae60118b9d67dd4df65a95508b4c13bab637c0344e6c03c34a9f20a2e0fda3619e732c0034d0d49640f5755be9157cce740b83bf1ed8d7d3e54a422be6b58de97bd689b59f5ab98a413bc20a360577a774f1aa5f33ab40f99bb97340fefbeb1676850ec23ee341e134d41e5731bb7c93fc9b16574165d213c1ca2a0a9a6f8ce97ee647ad8adf9c49b040f5adf9eac42a88d9cbe49184ac7e0b1805a4e83322ec42eb31748819f25f3d872663562f58ce64c3c1d23099c54c4e795894ab514fb8963302e3b878f9c2d8503dd506d60adcdbb7960c7e44e422b9af551972e9d880a7ea79993c130e75ea123f614736bb56d73a13599993ca590c61c4eadfac72ee0abe8690ad2bc691135cdc300de317674ca6c24db97c2d81743863d7222ec0d9f2dbf35516f0b6b3deee4c1540c417bdbe2a2d2f3fddbbb6f21fd8bba566b906383b576d94bab25bceeb1e0418c114ca4df8ae95206e9b58b3c283fe1808e0f479bae12546d2ed4a12d9b29043d2b9f3f104db260b883dc43e810f5bd2540315ee0dab6819a39b7c26b0efeeaa49a44e86a0f141a32bf0f115d737fa6e09ee91539bb8d3c50a9280ed02597784ec6848332b6a8c57117a30c04698c77ff34e4cd1e047ead0b059fbbb0649edc9e4c344c7604ae1bfba3ff45f070797b2f7847861300bd733d2f0f51fee55d0f8ad6dacc56cb481a9db47d5b6d06027a4f2d7e7f73dd9c7a2a08d79cb787b8dd249630245d25020f8474b64f340327469db56c14a5250404e2f368a459bc3f172e3781b33bf86fdcbf023ddd459436ac095a919157e4a47dc9a79457b1c53e2bbd2f09fa61df0ea0c9bdfd9c8719c30c0ae11c22b5e834bfdfdbb92b349130f4b2cc3972b3aef30924a9537e9337b928ee63358671e040ff6e01e7eb9b3dcf9704e22782071cdc941f17781c669dcd5a3383220241056909b5db5312dd7e16e00e6b16283fefbec7f06032e3a614257736f03decd41eea86f98f3af05de9dca82fb874be7e838884fa2c31ac5e611e45d56cd422a0f0ed5c05c03ef3555b4008276220d522c149c5be050fc0e25923d031b99af97f7e03c9a9b3a845ddc33b757fcc03baab8100a6168ecdcf2230c26de2101fa3648b50898f10a23b43116394b73b73279e15ecf843352ef399bb535db4b632005ad58c310d9660def14bb8ba07beb805328d7e4daa7f486a73f06338f2ec1fb5e2dae9d15d22cf235a5a2aa14d7155d68eeac3cc72a7e30cb1620363d0c06b5721f90062148fd74263648bc56a5a4f282944d44edb296119d926e82602a555ab477df6183f34c456de56ef497b8037f18d2a676ff37b669f4b0d6fa77e0db2a1d652342be6c501607edf286292c63f5e3a967f930ac5d31301439701e861075599250522bea1eeacab4d4bb2d01a554e21b50b200b04d19c76c4f230a700775a90b00daa7ee613efe679c172a6c63ccdb0183374e15ccfbcbf5a4b3aaa648911cf1a3e0baba63a7e23c11d60ba265c95a802975c2d7e66a2abcc8c830d0ec186284b892a1752871de8f6baee248f7298cba2e019e57af1cde503c5f7d7862e2be2df07a846720bfff22ccd87cf23007cdae4da6e46037203268190b856b995fb0b92efb6cfeb4c4cc8e089319b6273975f81c5bf64425d2cd69a1085100bfb971cddb2adf66f8112ef1742a5550c9fb78a462ebfc62cc15b609162ea3a87a2ede9b1ea373bbca69b307bf22263a7706640c95b58c54a33a498380806d5d85cb13e7b95ed94f2a16e50d0eaabf41fe31e7265c9243a26be553a78a78f35f21c96538abec10b6e27bf0a8da5009bbd28b73a4f77fe0ab1c9b9f41be10872e4a310ec9aaf3d041c4d1da69bf26ae32f130795479f3837dd4298df3206e2dd9e490d86956ead1c6c71bbfdebd4b3e53dd3e4576201473f272369670cd6fc97cf88f206df7c99dd9dc0cf91207935b3db40d9bcf3752e2714313e20c49abfa7eec664f83b6e598ef84eb5148a1657f3c9d12400f88b32ebfeeee5f82c3e3de7dd62de7cebc2d355c5215e788f442833c8113e249b1b6d1d3ed9f5135240458164c2828274177bd295502ba59b32a06b806e31d8ad8e6cdf2eb9580d33dfd2e2cf0ea26f413b7fe8ac8ca7092", 0x1000, 0x20000840}, 0x4008010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000340)=0x64, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="100100001c00070101000000fedbdf25067c0000080001"], 0x110}}, 0x40040) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = socket(0x11, 0x800000002, 0x0) dup3(r9, r8, 0x0) truncate(&(0x7f00000022c0)='./file1\x00', 0x400000f000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) 4.802156737s ago: executing program 6 (id=4019): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.324006454s ago: executing program 5 (id=4021): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0xc0ed000e, &(0x7f0000000380)={[{@sysvgroups}, {@grpid}, {@debug}, {@nolazytime}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@acl}, {@grpjquota}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x3690, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x8000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="850000002f00f4ff620a00ff1400000075000000feffffff95000000000000001810000071d86b4d20b0dcb5897a981060ee8e3a8d6d353aba89e3ba320e7b4af01c97fa52b2c00f6debcb85f75e2483fec6bb290d5ba958333d02443b1e7512ad885c3aadd6bb839b2f0825013ff92139cdd5684347625e426b439afec6ec831c214db3f3f0c33720c3ac4e44edb445332c5ea199237457201c5539b508cac34368a4544048018bc928", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 3.722830623s ago: executing program 5 (id=4022): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@ipv4_deladdr={0x18, 0x15, 0x115, 0x70bd26, 0x25dfdbfc, {0x2, 0x8, 0x80, 0xff, r3}}, 0x18}}, 0x4d884) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fstat(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x4, 0x48, 0x10, 0x0, 0x1, 0xfffffffe}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000080)=ANY=[@ANYBLOB="75a0cfc5ebe9"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000240), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local, 0xfffffffe}, 0x0, {[0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2704b295]}}, 0x5c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") 3.647237204s ago: executing program 6 (id=4023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, r4, 0xe}, 0x10}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r9, 0x0, 0x20000000}, 0x20) openat$cgroup_procs(r7, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) 3.594062745s ago: executing program 0 (id=4024): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="b800000019000100ffffffff00000000e00000020000000000000000000000000000000000000000000000000000000000000000000400000a0000008700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x4000090) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='1-6:5/', @ANYRESHEX=r5], 0x31) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x5, 0x14, &(0x7f0000000240)=""/20, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x1955a, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000780)=[{0x2, 0x3, 0x8, 0xc}, {0x2, 0x3, 0x7, 0x2}, {0x4, 0x2, 0x4, 0x3}, {0x1, 0x1, 0xf, 0x6}, {0x2, 0x2, 0x0, 0xb}, {0x1, 0x1, 0xe, 0xc}, {0x5, 0x1, 0x4, 0x1}, {0x5, 0x1, 0x8}], 0x10, 0x6}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000040000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700002000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='sched_kthread_work_queue_work\x00', r6, 0x0, 0x5b}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x38}, 0x400c805) 2.843559277s ago: executing program 8 (id=4025): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x23) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000004, @mcast1, 0x8000005}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @random="80cc03df2bac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70881bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) 2.728229819s ago: executing program 5 (id=4026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 2.727797599s ago: executing program 8 (id=4027): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x80dc}], 0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x60, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xffffffff, @mcast1}, 0x1c) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x101000, 0x3b) 2.727321828s ago: executing program 6 (id=4028): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000200)=0x7ffffffc) 2.553312111s ago: executing program 0 (id=4029): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="01010000000000206a0557000000000000010902240001000000030904000201030001000921270b000122060009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x7, {0x7, 0x5, "81b079d987"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.060535598s ago: executing program 0 (id=4030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c859, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808b500000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000007900ad0000000000180000000000000000000000000000009500000000000000d50a00000000000095001e0000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.634914505s ago: executing program 6 (id=4031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$tipc(0x1e, 0x7, 0x0) sendmsg$tipc(r1, &(0x7f0000000300)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000640)="15216e47dac2bb9978a4f52fa056858de3da1c1020dadde6e2d6d54745c26747f3cc743ece127ed3c24ab951b24590e9feeed294af1ccd9987504edd67338140e5415ea391f8a4e835ac0aeb3eef463f9df94329e584d9e8ef100e01aea0c2dfc794d25235802f67e150e5dd247f1f94fe8e001757146df29fc018d4183937808a3be4583775588a0ab5b3c6f75fa2e1cade8f3e9ee4e8f8292aa7f58eb895b3b2e5c4abb713a35e051fe4914f39e34f77a8d64f781f84a2251ff831ae2b13368b82cd9be26a6f1b88ec25e10bd8ffeda792018183eef65a1990bc31b47fd48668ecb79aa5ca5c5ae8", 0xe9}, {&(0x7f0000000400)="fa2a1bc543b464aafb47867a0eb49073e568f52bcfb7cd64996f4a88e03763b6081339f6b3c79a6eda91f91de128419a18b009bea75b90fb6debb669a4f4480c5128eae767a7fd250e9e848ade543b11cd177676ba3c5d8d55c8bb20d6e02cd85dbc", 0x62}, {&(0x7f0000000240)="dabc187c3eb4d3", 0x7}, {&(0x7f00000007c0)="82904c453d274e904cedada31d8368609eda9b3f43c73efb74d4f1d9886223fbbb3011fb6ab683542b241a82dcd58d3bd3eb32d8bff01e860ab72b3fd79a3976062b3ca1163d582078b160c237d5081be1c95bade21eb3eaaebab9d776dcc1458a9831", 0x63}, {0x0}], 0x5, &(0x7f0000000940)="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", 0x1000, 0x20000840}, 0x4008010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000340)=0x64, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="100100001c00070101000000fedbdf25067c0000080001"], 0x110}}, 0x40040) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = socket(0x11, 0x800000002, 0x0) dup3(r8, r7, 0x0) truncate(&(0x7f00000022c0)='./file1\x00', 0x400000f000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.484270987s ago: executing program 5 (id=4032): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000d40)="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", 0x2000, &(0x7f0000005100)={0x0, 0x0, 0x0, &(0x7f00000006c0)={0x18, 0x0, 0x6}, 0x0, 0x0, &(0x7f0000000800)={0x60, 0x0, 0x3, {{0x1, 0xffffffffffffff80, 0x5, 0x7f, 0x5, 0x9, 0x10, 0x8}}}, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x5, {0x0, 0x24}}, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="480000000000000002000000"], 0x0, &(0x7f0000004ec0)={0xa0, 0x0, 0x6, {{0x4, 0x0, 0x7, 0x938b, 0x4, 0x4, {0x2, 0x8, 0xa1, 0x0, 0x10, 0x4bb2, 0x40, 0x2, 0x7, 0xa000, 0x1b, 0x0, 0x0, 0x1, 0xf}}, {0x0, 0x10}}}, &(0x7f0000004f80)={0x20, 0xfffffffffffffff5, 0x2000000, {0x80000000, 0x4, 0x7, 0x3}}, &(0x7f0000004fc0)={0x130, 0x0, 0x3, {0x7, 0x8, 0x0, '\x00', {0x2, 0x3, 0x3, 0xfffffc00, 0x0, 0x0, 0x2000, '\x00', 0xf3, 0xffffffffffffffff, 0x200, 0x101, {0x3, 0x6}, {0xe4, 0x35}, {0x8, 0x8}, {0x5}, 0x3, 0x10001, 0x2}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.230365481s ago: executing program 2 (id=4033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe80ffea0000000000000000001000bbff02000000000000000000000000000132"], 0x0) 1.167914812s ago: executing program 2 (id=4034): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r4) 1.116729073s ago: executing program 0 (id=4035): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x80) mkdir(&(0x7f0000000180)='./file0\x00', 0x17e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0xb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x37fe0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000235ef85302e201e7d639b8be523d63fee08f7d415af5dc045c6da872dffeb7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff89e5edb0455ea1ceb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 574.884392ms ago: executing program 6 (id=4036): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0xba01}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="16f50000", @ANYRES16=0x0, @ANYRES32=0x0], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x19, &(0x7f0000000400)={@broadcast, @local, @val={@val, {0x8100, 0x5, 0x0, 0xfff}}, {@mpls_uc={0x86dd, {[], @llc={@llc={0xe, 0xfc, '\x00'}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) ustat(0x4, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x8a, &(0x7f0000000680)) io_setup(0x7, &(0x7f0000000280)) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) r7 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_procfs(r7, &(0x7f00000001c0)='cmdline\x00') syz_open_dev$tty1(0xc, 0x4, 0x4) readv(r9, &(0x7f0000000340)=[{&(0x7f0000000380)=""/104, 0x68}], 0x1) io_setup(0x4, &(0x7f00000002c0)=0x0) io_submit(r10, 0x0, &(0x7f0000000500)) 335.221785ms ago: executing program 0 (id=4037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c859, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000007900ad0000000000180000000000000000000000000000009500000000000000d50a00000000000095001e0000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) (fail_nth: 9) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 264.459846ms ago: executing program 2 (id=4038): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000034ed00000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028020000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c0001fe0f000000ff0300000c00010004000000080000000c00010004000000020000000c00010005000000030000000800", @ANYRES32=r1], 0xb4}}, 0x0) 253.678546ms ago: executing program 5 (id=4039): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x30, 0x4, "c53fe07a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, 0x0, 0x0}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x40, 0x7, 0x4, "c306392f"}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0xc, 0xb, {0xb, 0x21, "8f72c3af4a47a9a9ba"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x20, 0x14, 0x1d, "fc31b67b1122f9277f49646a3f7df5f3f414c7915e8ce22e17efcaf648"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x36}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xd}}) 0s ago: executing program 0 (id=4040): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500001e0000000025dafff307c0f0b0afa79f3d2662fe8d2c543fd2b9fb5781151b515aee309e5e0d0e4593a5056b1845e8fa2a209742a1a9c41a7b36959a0eb823b5e1ac7d30f99f5741d4dcb8a2c315e82be9dc9a3254468c200e7c59c9ee48e4f4a0f73a5ace23c3df43dbb7907e7b1cac21f34bd0b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000010c0)=ANY=[], 0x298}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x1, 0x8eaa, 0xfffd, {0x0, 0x1}, {0x52, 0x2}, @const={0x40, {0x4d, 0x5, 0xe00, 0x8}}}) bind$802154_raw(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): ? avc_compute_av+0x502/0x6b0 [ 619.684584][T12092] dump_stack+0x15/0x1c [ 619.688724][T12092] should_fail+0x3c1/0x510 [ 619.693127][T12092] ? avc_alloc_node+0x7e/0x320 [ 619.697879][T12092] __should_failslab+0xa4/0xe0 [ 619.702633][T12092] should_failslab+0x9/0x20 [ 619.707123][T12092] kmem_cache_alloc+0x3d/0x2e0 [ 619.711873][T12092] avc_alloc_node+0x7e/0x320 [ 619.716452][T12092] ? __kasan_check_write+0x14/0x20 [ 619.721551][T12092] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 619.726995][T12092] ? _raw_spin_lock+0xe0/0xe0 [ 619.731658][T12092] ? avc_xperms_free+0x270/0x270 [ 619.736584][T12092] avc_compute_av+0x147/0x6b0 [ 619.741249][T12092] avc_has_extended_perms+0x944/0xc30 [ 619.746606][T12092] ? avc_ss_reset+0x280/0x280 [ 619.751267][T12092] ? kasan_set_track+0x5b/0x70 [ 619.756017][T12092] ? __kasan_slab_free+0x11/0x20 [ 619.760937][T12092] ? slab_free_freelist_hook+0xc5/0x190 [ 619.766468][T12092] ? kmem_cache_free+0x100/0x2d0 [ 619.771392][T12092] ? putname+0xfe/0x150 [ 619.775543][T12092] ? do_sys_openat2+0x207/0x6d0 [ 619.780404][T12092] ? memset+0x35/0x40 [ 619.784383][T12092] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 619.790962][T12092] ioctl_has_perm+0x391/0x4c0 [ 619.795633][T12092] ? has_cap_mac_admin+0x330/0x330 [ 619.797153][T12088] incfs: Can't find or create .index dir in ./file0 [ 619.800740][T12092] ? __kasan_slab_free+0x11/0x20 [ 619.800751][T12092] ? kernel_write+0x3c0/0x3c0 [ 619.800763][T12092] selinux_file_ioctl+0x377/0x480 [ 619.800773][T12092] ? mutex_trylock+0xa0/0xa0 [ 619.800781][T12092] ? __fget_files+0x2c4/0x320 [ 619.800790][T12092] ? selinux_file_alloc_security+0x120/0x120 [ 619.800799][T12092] ? __fget_files+0x2c4/0x320 [ 619.800810][T12092] security_file_ioctl+0x74/0xa0 [ 619.800827][T12092] __se_sys_ioctl+0x53/0x1a0 [ 619.810133][T12088] incfs: mount failed -14 [ 619.812299][T12092] __x64_sys_ioctl+0x7b/0x90 [ 619.812318][T12092] do_syscall_64+0x31/0x40 [ 619.864450][T12092] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 619.870310][T12092] RIP: 0033:0x7f0c49d52929 [ 619.874694][T12092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.894270][T12092] RSP: 002b:00007f0c483bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.902662][T12092] RAX: ffffffffffffffda RBX: 00007f0c49f79fa0 RCX: 00007f0c49d52929 [ 619.910606][T12092] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000005 [ 619.918550][T12092] RBP: 00007f0c483bb090 R08: 0000000000000000 R09: 0000000000000000 [ 619.926488][T12092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.934427][T12092] R13: 0000000000000000 R14: 00007f0c49f79fa0 R15: 00007ffef22f3b28 [ 620.759378][T12103] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3486'. [ 620.930722][T12113] fuse: Bad value for 'fd' [ 621.035542][T12110] overlayfs: failed to resolve './file0': -2 [ 621.042437][T12103] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3486'. [ 621.296741][T12119] incfs_lookup_dentry err:-14 [ 621.301496][T12119] incfs: Can't find or create .incomplete dir in ./file0 [ 621.309000][T12119] incfs: mount failed -14 [ 621.836079][T12130] device syz_tun entered promiscuous mode [ 621.842257][T12130] device vlan2 entered promiscuous mode [ 622.111401][T12138] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 622.663252][ T24] kauditd_printk_skb: 596 callbacks suppressed [ 622.663263][ T24] audit: type=1400 audit(600.237:49727): avc: denied { create } for pid=12120 comm="syz.2.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 622.739963][ T24] audit: type=1400 audit(600.340:49728): avc: denied { write } for pid=12120 comm="syz.2.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 622.770295][ T24] audit: type=1400 audit(600.340:49729): avc: denied { read } for pid=12120 comm="syz.2.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 622.808338][ T24] audit: type=1400 audit(600.340:49730): avc: denied { mounton } for pid=12120 comm="syz.2.3493" path="/478/file0" dev="tmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 622.832211][ T24] audit: type=1400 audit(600.340:49731): avc: denied { mount } for pid=12120 comm="syz.2.3493" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 622.853932][ T24] audit: type=1400 audit(600.499:49732): avc: denied { map_create } for pid=12136 comm="syz.8.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 622.877591][T12158] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 622.889950][ T24] audit: type=1400 audit(600.499:49733): avc: denied { bpf } for pid=12136 comm="syz.8.3499" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 622.911532][ T24] audit: type=1400 audit(600.499:49734): avc: denied { map_read map_write } for pid=12136 comm="syz.8.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 622.931690][ T24] audit: type=1400 audit(600.508:49735): avc: denied { unmount } for pid=10493 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 622.946111][T12165] audit: audit_backlog=65 > audit_backlog_limit=64 [ 622.980103][T12158] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,discard,dioread_nolock,nodioread_nolock,dioread_nolock,minixdf,dioread_nolock, [ 623.128751][T12174] device vlan2 entered promiscuous mode [ 623.185501][T12158] EXT4-fs error (device loop5): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 623.201839][T12172] syz.0.3507[12172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 623.201905][T12172] syz.0.3507[12172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 623.214411][T12158] EXT4-fs (loop5): Remounting filesystem read-only [ 623.233360][T12158] EXT4-fs error (device loop5) in ext4_evict_inode:258: Readonly filesystem [ 623.245098][T12158] EXT4-fs error (device loop5) in ext4_evict_inode:258: Readonly filesystem [ 623.757124][T12183] F2FS-fs (loop5): Unrecognized mount option "alloc_mQü%áN]kótÆ|¤ode=default" or missing value [ 623.981462][T12200] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3514'. [ 624.121974][T12206] incfs_lookup_dentry err:-14 [ 624.126710][T12206] incfs: Can't find or create .incomplete dir in ./file0 [ 624.135143][T12206] incfs: mount failed -14 [ 624.686481][T12220] loop6: p1 < > p3 [ 624.692752][T12220] loop6: p3 size 134217728 extends beyond EOD, truncated [ 624.865508][T12228] FAULT_INJECTION: forcing a failure. [ 624.865508][T12228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.891388][T12228] CPU: 1 PID: 12228 Comm: syz.2.3527 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 624.902772][T12228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 624.912828][T12228] Call Trace: [ 624.916130][T12228] __dump_stack+0x21/0x24 [ 624.920604][T12228] dump_stack_lvl+0x169/0x1d8 [ 624.925295][T12228] ? show_regs_print_info+0x18/0x18 [ 624.930506][T12228] ? __kasan_check_write+0x14/0x20 [ 624.935629][T12228] dump_stack+0x15/0x1c [ 624.939790][T12228] should_fail+0x3c1/0x510 [ 624.944217][T12228] should_fail_usercopy+0x1a/0x20 [ 624.949255][T12228] _copy_from_iter+0x1d1/0x9f0 [ 624.954019][T12228] ? __kasan_check_read+0x11/0x20 [ 624.959058][T12228] ? __check_object_size+0x2f4/0x3c0 [ 624.964347][T12228] skb_copy_datagram_from_iter+0xfa/0x6b0 [ 624.970071][T12228] ? skb_put+0x10e/0x1f0 [ 624.974325][T12228] tun_get_user+0x140a/0x3090 [ 624.979009][T12228] ? __x64_sys_openat+0x136/0x160 [ 624.984036][T12228] ? tun_do_read+0x1c00/0x1c00 [ 624.988819][T12228] ? file_has_perm+0x4a1/0x640 [ 624.993585][T12228] ? match_file+0x130/0x130 [ 624.998095][T12228] ? __fsnotify_parent+0x5f5/0x6c0 [ 625.003212][T12228] ? selinux_file_permission+0x3ef/0x510 [ 625.008845][T12228] ? fsnotify_perm+0x66/0x4b0 [ 625.013522][T12228] tun_chr_write_iter+0x1bf/0x270 [ 625.018537][T12228] vfs_write+0x725/0xd60 [ 625.022768][T12228] ? __bpf_trace_kmem_free+0x6f/0x90 [ 625.028036][T12228] ? kernel_write+0x3c0/0x3c0 [ 625.032695][T12228] ? __fget_files+0x2c4/0x320 [ 625.037352][T12228] ? __fdget_pos+0x1f7/0x380 [ 625.041925][T12228] ? ksys_write+0x71/0x240 [ 625.046319][T12228] ksys_write+0x140/0x240 [ 625.050627][T12228] ? __ia32_sys_read+0x90/0x90 [ 625.055369][T12228] ? fpu__clear_all+0x20/0x20 [ 625.060024][T12228] __x64_sys_write+0x7b/0x90 [ 625.064592][T12228] do_syscall_64+0x31/0x40 [ 625.068987][T12228] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 625.074903][T12228] RIP: 0033:0x7f9318f923df [ 625.079300][T12228] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 625.098881][T12228] RSP: 002b:00007f93175fc000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 625.107271][T12228] RAX: ffffffffffffffda RBX: 00007f93191bafa0 RCX: 00007f9318f923df [ 625.115220][T12228] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 625.123171][T12228] RBP: 00007f93175fc090 R08: 0000000000000000 R09: 0000000000000000 [ 625.131118][T12228] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 625.139096][T12228] R13: 0000000000000000 R14: 00007f93191bafa0 R15: 00007fff02504c58 [ 625.601996][T12244] overlayfs: failed to resolve './file0': -2 [ 625.745067][T12252] fuse: Unknown parameter '+þYgroup_' [ 625.812239][T12247] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.3532: inode #1: comm syz.5.3532: iget: illegal inode # [ 625.825769][T12247] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.3532: error while reading EA inode 1 err=-117 [ 625.839637][T12247] EXT4-fs (loop5): 1 orphan inode deleted [ 625.845384][T12247] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 625.856538][T12247] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 626.249247][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3536'. [ 626.258839][T12261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.323725][T12263] EXT4-fs (loop5): Ignoring removed nobh option [ 626.331140][T12263] EXT4-fs (loop5): Ignoring removed bh option [ 626.337371][T12263] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 626.353331][T12263] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x000000000000000c,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 626.356254][T12265] FAULT_INJECTION: forcing a failure. [ 626.356254][T12265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.396862][T12265] CPU: 0 PID: 12265 Comm: syz.2.3538 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 626.408245][T12265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 626.418289][T12265] Call Trace: [ 626.421571][T12265] __dump_stack+0x21/0x24 [ 626.425877][T12265] dump_stack_lvl+0x169/0x1d8 [ 626.430535][T12265] ? thaw_kernel_threads+0x220/0x220 [ 626.435790][T12265] ? vsnprintf+0x1871/0x1960 [ 626.440355][T12265] ? show_regs_print_info+0x18/0x18 [ 626.445536][T12265] dump_stack+0x15/0x1c [ 626.449668][T12265] should_fail+0x3c1/0x510 [ 626.454060][T12265] should_fail_usercopy+0x1a/0x20 [ 626.459062][T12265] _copy_to_user+0x20/0x90 [ 626.463453][T12265] simple_read_from_buffer+0xe9/0x160 [ 626.468797][T12265] proc_fail_nth_read+0x19a/0x210 [ 626.473798][T12265] ? proc_fault_inject_write+0x2f0/0x2f0 [ 626.479407][T12265] ? rw_verify_area+0x1c0/0x360 [ 626.484233][T12265] ? proc_fault_inject_write+0x2f0/0x2f0 [ 626.489839][T12265] vfs_read+0x1fe/0xa10 [ 626.493973][T12265] ? kernel_read+0x70/0x70 [ 626.498366][T12265] ? __kasan_check_write+0x14/0x20 [ 626.503456][T12265] ? mutex_lock+0x8c/0xe0 [ 626.507764][T12265] ? mutex_trylock+0xa0/0xa0 [ 626.512329][T12265] ? __fget_files+0x2c4/0x320 [ 626.516981][T12265] ? __fdget_pos+0x2d2/0x380 [ 626.521543][T12265] ? ksys_read+0x71/0x240 [ 626.525846][T12265] ksys_read+0x140/0x240 [ 626.530061][T12265] ? vfs_write+0xd60/0xd60 [ 626.534447][T12265] ? __fdget+0x1b3/0x230 [ 626.538667][T12265] __x64_sys_read+0x7b/0x90 [ 626.543144][T12265] do_syscall_64+0x31/0x40 [ 626.547537][T12265] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 626.553402][T12265] RIP: 0033:0x7f9318f9233c [ 626.557796][T12265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 626.577375][T12265] RSP: 002b:00007f93175fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 626.585765][T12265] RAX: ffffffffffffffda RBX: 00007f93191bafa0 RCX: 00007f9318f9233c [ 626.593974][T12265] RDX: 000000000000000f RSI: 00007f93175fc0a0 RDI: 0000000000000006 [ 626.601921][T12265] RBP: 00007f93175fc090 R08: 0000000000000000 R09: 0000000000000000 [ 626.609870][T12265] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 626.617822][T12265] R13: 0000000000000000 R14: 00007f93191bafa0 R15: 00007fff02504c58 [ 626.722121][T12270] GPT:first_usable_lbas don't match. [ 626.728468][T12270] GPT:34 != 290 [ 626.738032][T12270] GPT: Use GNU Parted to correct GPT errors. [ 626.743917][T12276] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 626.744153][T12270] loop8: p1 p2 p3 [ 626.979094][T12286] futex_wake_op: syz.2.3543 tries to shift op by 32; fix this program [ 627.057103][ T1400] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 627.634654][ T1400] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 627.651384][ T1400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.661755][ T1400] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 627.675202][ T1400] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 627.684426][ T1400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.701175][ T1400] usb 7-1: config 0 descriptor?? [ 627.770614][T12302] EXT4-fs (loop5): Test dummy encryption mode enabled [ 627.778758][T12298] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 627.794820][T12302] EXT4-fs (loop5): Test dummy encryption mode enabled [ 627.817749][T12302] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 628.226851][ T24] kauditd_printk_skb: 997 callbacks suppressed [ 628.226869][ T24] audit: type=1400 audit(605.522:50731): avc: denied { execmem } for pid=12307 comm="syz.8.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 628.340346][ T1400] usbhid 7-1:0.0: can't add hid device: -71 [ 628.348201][ T1400] usbhid: probe of 7-1:0.0 failed with error -71 [ 628.409454][ T1400] usb 7-1: USB disconnect, device number 37 [ 628.410567][ T24] audit: type=1400 audit(605.681:50732): avc: denied { map_create } for pid=12300 comm="syz.5.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 628.434479][ T24] audit: type=1400 audit(605.681:50733): avc: denied { bpf } for pid=12300 comm="syz.5.3547" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.456171][ T24] audit: type=1400 audit(605.681:50734): avc: denied { map_read map_write } for pid=12300 comm="syz.5.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 628.477115][ T24] audit: type=1400 audit(605.681:50735): avc: denied { prog_load } for pid=12307 comm="syz.8.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 628.496330][ T24] audit: type=1400 audit(605.681:50736): avc: denied { bpf } for pid=12307 comm="syz.8.3548" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.517003][ T24] audit: type=1400 audit(605.681:50737): avc: denied { perfmon } for pid=12307 comm="syz.8.3548" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.542945][ T24] audit: type=1400 audit(605.691:50738): avc: denied { prog_run } for pid=12300 comm="syz.5.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 628.562169][ T24] audit: type=1400 audit(605.691:50739): avc: denied { execute } for pid=12307 comm="syz.8.3548" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 628.583500][ T24] audit: type=1400 audit(605.691:50740): avc: denied { execute_no_trans } for pid=12307 comm="syz.8.3548" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 629.358111][T12338] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 630.074001][T12352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3563'. [ 630.212366][T12357] EXT4-fs (loop5): Test dummy encryption mode enabled [ 630.219583][T12357] EXT4-fs (loop5): Test dummy encryption mode enabled [ 630.289380][T12357] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 630.360725][ T1400] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 630.406878][T12364] loop6: p1 < > p3 [ 631.403393][T12364] loop6: p3 size 134217728 extends beyond EOD, truncated [ 631.563708][ T1400] usb 3-1: Using ep0 maxpacket: 32 [ 631.701504][ T1116] udevd[1116]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 631.832745][ T298] udevd[298]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 631.857505][ T1400] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 631.878002][ T1400] usb 3-1: config 0 has no interface number 0 [ 631.886316][ T1400] usb 3-1: config 0 interface 184 has no altsetting 0 [ 632.060705][ T1400] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 632.069925][ T1400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.080122][ T1400] usb 3-1: Product: syz [ 632.084908][ T1400] usb 3-1: Manufacturer: syz [ 632.089821][ T1400] usb 3-1: SerialNumber: syz [ 632.104989][ T1400] usb 3-1: config 0 descriptor?? [ 632.147213][ T1400] smsc75xx v1.0.0 [ 633.083696][T12402] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 633.336314][T12412] EXT4-fs (loop6): Test dummy encryption mode enabled [ 633.343688][T12412] EXT4-fs (loop6): Test dummy encryption mode enabled [ 633.352088][T12412] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 633.833564][ T24] kauditd_printk_skb: 464 callbacks suppressed [ 633.931574][ T24] audit: type=1400 audit(610.751:51205): avc: denied { prog_load } for pid=12407 comm="syz.0.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 634.077002][ T24] audit: type=1400 audit(610.751:51206): avc: denied { bpf } for pid=12407 comm="syz.0.3581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 634.097268][ T24] audit: type=1400 audit(610.751:51207): avc: denied { perfmon } for pid=12407 comm="syz.0.3581" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 634.118336][ T24] audit: type=1400 audit(610.751:51208): avc: denied { prog_run } for pid=12407 comm="syz.0.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 634.142272][ T24] audit: type=1400 audit(610.985:51209): avc: denied { create } for pid=12407 comm="syz.0.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 634.168825][ T24] audit: type=1400 audit(610.985:51210): avc: denied { write } for pid=12407 comm="syz.0.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 634.208713][ T24] audit: type=1400 audit(610.985:51211): avc: denied { nlmsg_write } for pid=12407 comm="syz.0.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 634.229635][ T24] audit: type=1400 audit(610.985:51212): avc: denied { prog_load } for pid=12407 comm="syz.0.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 634.248608][ T24] audit: type=1400 audit(610.985:51213): avc: denied { bpf } for pid=12407 comm="syz.0.3581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 634.269421][ T24] audit: type=1400 audit(610.985:51214): avc: denied { bpf } for pid=12407 comm="syz.0.3581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 634.401612][ T570] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 634.476815][ T1400] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 634.526692][ T1400] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 634.568035][T12429] syz.0.3588[12429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 634.568075][T12429] syz.0.3588[12429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 634.579795][ T1400] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 634.648354][ T1400] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 634.660223][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3588'. [ 634.668818][ T570] usb 6-1: Using ep0 maxpacket: 32 [ 634.712264][ T1400] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 634.722992][ T1400] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 634.732616][ T1400] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 634.740356][ T1400] usb 3-1: USB disconnect, device number 41 [ 634.839896][ T570] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 634.848624][ T570] usb 6-1: config 0 has no interface number 0 [ 634.855278][ T570] usb 6-1: config 0 interface 184 has no altsetting 0 [ 635.043598][ T570] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 635.052694][ T570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.060713][ T570] usb 6-1: Product: syz [ 635.064951][ T570] usb 6-1: Manufacturer: syz [ 635.069528][ T570] usb 6-1: SerialNumber: syz [ 635.088907][ T570] usb 6-1: config 0 descriptor?? [ 635.130689][ T570] smsc75xx v1.0.0 [ 636.268945][T12448] incfs: Can't find or create .index dir in ./file0 [ 636.288653][T12448] incfs: mount failed -14 [ 636.533715][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3593'. [ 636.710717][ T1400] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 636.967379][ T570] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 636.978281][ T570] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 636.999513][ T570] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 637.010378][ T570] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 637.020012][ T570] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 637.030457][ T570] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 637.039992][ T570] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 637.068723][ T570] usb 6-1: USB disconnect, device number 35 [ 637.106425][ T1400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 637.117953][ T1400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 637.119515][T12456] EXT4-fs (loop6): Test dummy encryption mode enabled [ 637.134531][ T1400] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 637.137052][T12456] EXT4-fs (loop6): Test dummy encryption mode enabled [ 637.149184][ T1400] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 637.164789][ T1400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.170727][T12456] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 637.188837][ T1400] usb 3-1: config 0 descriptor?? [ 637.213509][T12452] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 637.674446][T12452] tipc: Enabling of bearer rejected, already enabled [ 637.916128][T12471] incfs_lookup_dentry err:-14 [ 637.921005][T12471] incfs: Can't find or create .incomplete dir in ./file0 [ 637.928366][T12471] incfs: mount failed -14 [ 638.391249][ T1400] apple 0003:05AC:0264.0065: collection stack underflow [ 638.397994][T12477] 8021q: VLANs not supported on ip6tnl0 [ 638.403397][ T1400] apple 0003:05AC:0264.0065: item 0 1 0 12 parsing failed [ 638.413258][ T1400] apple 0003:05AC:0264.0065: parse failed [ 638.419087][ T1400] apple: probe of 0003:05AC:0264.0065 failed with error -22 [ 638.422723][T12478] incfs: Can't find or create .index dir in ./file0 [ 638.433448][T12478] incfs: mount failed -14 [ 638.840506][T12486] overlayfs: missing 'lowerdir' [ 639.188792][ T24] kauditd_printk_skb: 342 callbacks suppressed [ 639.188803][ T24] audit: type=1400 audit(615.989:51557): avc: denied { map_create } for pid=12499 comm="syz.0.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 639.214013][ T24] audit: type=1400 audit(616.008:51558): avc: denied { ioctl } for pid=12496 comm="syz.8.3606" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 639.238817][ T24] audit: type=1400 audit(616.017:51559): avc: denied { bpf } for pid=12499 comm="syz.0.3607" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 639.260505][ T24] audit: type=1400 audit(616.017:51560): avc: denied { map_read map_write } for pid=12499 comm="syz.0.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 639.296316][ T24] audit: type=1400 audit(616.017:51561): avc: denied { prog_load } for pid=12499 comm="syz.0.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 639.321117][ T24] audit: type=1400 audit(616.017:51562): avc: denied { bpf } for pid=12499 comm="syz.0.3607" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 639.429529][ T24] audit: type=1400 audit(616.017:51563): avc: denied { perfmon } for pid=12499 comm="syz.0.3607" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 639.450487][ T24] audit: type=1400 audit(616.092:51564): avc: denied { read write } for pid=12496 comm="syz.8.3606" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 639.474263][ T24] audit: type=1400 audit(616.092:51565): avc: denied { open } for pid=12496 comm="syz.8.3606" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 639.497286][ T24] audit: type=1400 audit(616.092:51566): avc: denied { ioctl } for pid=12496 comm="syz.8.3606" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 639.587687][T12510] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3611'. [ 639.676388][T12519] 8021q: VLANs not supported on ip6tnl0 [ 639.700055][T12523] tipc: New replicast peer: 255.255.255.255 [ 639.706290][T12523] tipc: Enabled bearer , priority 10 [ 639.835960][T12520] EXT4-fs (loop8): Ignoring removed orlov option [ 639.842805][T12520] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 639.842805][T12520] [ 640.211859][T12527] EXT4-fs (loop6): Test dummy encryption mode enabled [ 640.297654][T12527] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 640.307737][ T385] usb 3-1: USB disconnect, device number 42 [ 640.341224][T12527] EXT4-fs (loop6): 1 truncate cleaned up [ 640.347289][T12527] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue [ 641.229765][T12542] blk_update_request: I/O error, dev loop17, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 641.241689][T12542] EXT4-fs (loop17): unable to read superblock [ 641.394641][T12555] exfat: Bad value for 'uid' [ 641.524698][T12562] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3624'. [ 641.773054][T12568] device syzkaller0 entered promiscuous mode [ 644.121744][T12598] exfat: Bad value for 'uid' [ 644.260107][T12609] incfs_lookup_dentry err:-5 [ 644.270290][T12609] incfs: Can't find or create .index dir in ./file0 [ 644.285776][T12609] incfs: mount failed -5 [ 644.682656][ T24] kauditd_printk_skb: 618 callbacks suppressed [ 644.682666][ T24] audit: type=1400 audit(621.012:52185): avc: denied { map_create } for pid=12612 comm="syz.2.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 644.756828][ T24] audit: type=1400 audit(621.012:52186): avc: denied { map_read map_write } for pid=12612 comm="syz.2.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 644.791156][ T24] audit: type=1400 audit(621.162:52187): avc: denied { read write } for pid=10039 comm="syz-executor" name="loop0" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.815258][ T24] audit: type=1400 audit(621.162:52188): avc: denied { read write open } for pid=10039 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.840278][ T24] audit: type=1400 audit(621.162:52189): avc: denied { ioctl } for pid=10039 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=700 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.869050][ T24] audit: type=1400 audit(621.162:52190): avc: denied { read write } for pid=10017 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.894016][ T24] audit: type=1400 audit(621.162:52191): avc: denied { open } for pid=10017 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.918085][ T24] audit: type=1400 audit(621.162:52192): avc: denied { ioctl } for pid=10017 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.943417][ T24] audit: type=1400 audit(621.171:52193): avc: denied { create } for pid=12619 comm="syz.5.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 644.963663][ T24] audit: type=1400 audit(621.190:52194): avc: denied { execmem } for pid=12619 comm="syz.5.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 645.091162][T12635] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 645.188413][T12635] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3645'. [ 645.412274][T12645] incfs_lookup_dentry err:-5 [ 645.417023][T12645] incfs: Can't find or create .index dir in ./file0 [ 645.427883][T12645] incfs: mount failed -5 [ 645.842514][T12650] loop6: p1 < > p3 [ 645.849938][T12650] loop6: p3 size 134217728 extends beyond EOD, truncated [ 645.986137][T12654] FAULT_INJECTION: forcing a failure. [ 645.986137][T12654] name failslab, interval 1, probability 0, space 0, times 0 [ 646.009684][T12654] CPU: 1 PID: 12654 Comm: syz.6.3656 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 646.021067][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 646.031116][T12654] Call Trace: [ 646.034509][T12654] __dump_stack+0x21/0x24 [ 646.038833][T12654] dump_stack_lvl+0x169/0x1d8 [ 646.043499][T12654] ? thaw_kernel_threads+0x220/0x220 [ 646.048776][T12654] ? rw_verify_area+0x1c0/0x360 [ 646.053617][T12654] ? show_regs_print_info+0x18/0x18 [ 646.058803][T12654] ? vfs_write+0xac8/0xd60 [ 646.063213][T12654] ? __kasan_slab_free+0x11/0x20 [ 646.068231][T12654] dump_stack+0x15/0x1c [ 646.072377][T12654] should_fail+0x3c1/0x510 [ 646.076790][T12654] ? __se_sys_mount+0x9c/0x380 [ 646.081542][T12654] __should_failslab+0xa4/0xe0 [ 646.086298][T12654] should_failslab+0x9/0x20 [ 646.090794][T12654] __kmalloc_track_caller+0x5f/0x320 [ 646.096068][T12654] ? strnlen_user+0xe8/0x1c0 [ 646.100652][T12654] strndup_user+0x74/0x150 [ 646.105057][T12654] __se_sys_mount+0x9c/0x380 [ 646.109635][T12654] ? fput+0x1a/0x20 [ 646.113437][T12654] ? __x64_sys_mount+0xd0/0xd0 [ 646.118193][T12654] ? fpu__clear_all+0x20/0x20 [ 646.122865][T12654] ? preempt_count_add+0x90/0x1b0 [ 646.127884][T12654] __x64_sys_mount+0xbf/0xd0 [ 646.132619][T12654] do_syscall_64+0x31/0x40 [ 646.137043][T12654] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 646.142933][T12654] RIP: 0033:0x7f19ba22a929 [ 646.147362][T12654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.166962][T12654] RSP: 002b:00007f19b8893038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 646.175370][T12654] RAX: ffffffffffffffda RBX: 00007f19ba451fa0 RCX: 00007f19ba22a929 [ 646.183428][T12654] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 646.191395][T12654] RBP: 00007f19b8893090 R08: 0000200000000380 R09: 0000000000000000 [ 646.199508][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.207470][T12654] R13: 0000000000000000 R14: 00007f19ba451fa0 R15: 00007fff6f5eb998 [ 646.278452][ T298] udevd[298]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 646.321049][ T1112] udevd[1112]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 646.364686][T12666] EXT4-fs (loop6): Test dummy encryption mode enabled [ 646.374437][T12666] EXT4-fs (loop6): Test dummy encryption mode enabled [ 646.408203][T12666] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 647.653491][T12686] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3665'. [ 647.662588][T12686] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3665'. [ 647.676212][T12686] fuse: Bad value for 'fd' [ 648.876715][ T385] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 649.277524][T12709] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 649.287736][ T385] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.304267][ T385] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.304494][T12709] SELinux: failed to load policy [ 649.316576][ T385] usb 7-1: New USB device found, idVendor=056a, idProduct=dd0d, bcdDevice= 0.00 [ 649.331895][ T385] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.343871][ T385] usb 7-1: config 0 descriptor?? [ 650.082683][ T24] kauditd_printk_skb: 364 callbacks suppressed [ 650.082790][ T24] audit: type=1400 audit(625.811:52559): avc: denied { prog_load } for pid=12712 comm="syz.5.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 650.149013][ T24] audit: type=1400 audit(625.820:52560): avc: denied { bpf } for pid=12712 comm="syz.5.3674" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 650.159493][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3675'. [ 650.170341][ T24] audit: type=1400 audit(625.820:52561): avc: denied { perfmon } for pid=12712 comm="syz.5.3674" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 650.202536][ T24] audit: type=1400 audit(625.830:52562): avc: denied { prog_run } for pid=12712 comm="syz.5.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 650.222996][ T24] audit: type=1400 audit(625.905:52563): avc: denied { mounton } for pid=12712 comm="syz.5.3674" path="/135/file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 650.329951][ T931] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 650.332105][ T385] wacom 0003:056A:DD0D.0066: unknown main item tag 0x0 [ 650.337592][ T24] audit: type=1400 audit(625.914:52564): avc: denied { mount } for pid=12712 comm="syz.5.3674" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 650.367133][ T24] audit: type=1400 audit(625.970:52565): avc: denied { unlink } for pid=12712 comm="syz.5.3674" name="#16d" dev="tmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 650.390036][ T385] wacom 0003:056A:DD0D.0066: Unknown device_type for 'HID 056a:dd0d'. Ignoring. [ 650.392181][ T24] audit: type=1400 audit(625.979:52566): avc: denied { mount } for pid=12712 comm="syz.5.3674" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 650.432955][ T24] audit: type=1400 audit(626.054:52567): avc: denied { write } for pid=12712 comm="syz.5.3674" name="dev" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 650.481677][ T24] audit: type=1400 audit(626.054:52568): avc: denied { add_name } for pid=12712 comm="syz.5.3674" name="fuse" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 650.592556][T12695] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 650.856668][ T931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.858625][T12731] overlayfs: failed to resolve './file0': -2 [ 650.879386][ T931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.889417][ T931] usb 3-1: New USB device found, idVendor=056a, idProduct=dd0d, bcdDevice= 0.00 [ 650.898552][ T931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.920595][ T931] usb 3-1: config 0 descriptor?? [ 651.228726][ T1202] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 651.239562][ T931] usbhid 3-1:0.0: can't add hid device: -71 [ 651.245555][ T931] usbhid: probe of 3-1:0.0 failed with error -71 [ 651.260729][ T931] usb 3-1: USB disconnect, device number 43 [ 651.478326][T12750] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3685'. [ 651.487656][T12750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3685'. [ 651.496797][ T1202] usb 6-1: Using ep0 maxpacket: 32 [ 651.502944][T12750] fuse: Bad value for 'fd' [ 651.533865][T12754] 8021q: VLANs not supported on ip6tnl0 [ 651.666955][ T1202] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.678171][ T1202] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.691281][ T1202] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.697961][ T1202] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 651.707057][ T1202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.717414][ T385] usb 7-1: USB disconnect, device number 38 [ 651.758338][ T1202] usb 6-1: config 0 descriptor?? [ 651.970854][T12761] incfs_lookup_dentry err:-5 [ 651.976032][T12761] incfs: Can't find or create .index dir in ./file0 [ 651.983342][T12761] incfs: mount failed -5 [ 652.112223][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3690'. [ 652.121389][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3690'. [ 652.132108][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3690'. [ 652.191314][T12766] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 652.299159][ T1202] wacom 0003:056A:0057.0067: item fetching failed at offset 5/6 [ 652.316808][ T1202] wacom 0003:056A:0057.0067: parse failed [ 652.322690][ T1202] wacom: probe of 0003:056A:0057.0067 failed with error -22 [ 652.409610][T12776] EXT4-fs (loop8): Test dummy encryption mode enabled [ 652.425990][T12776] EXT4-fs (loop8): Test dummy encryption mode enabled [ 652.477898][T12776] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 652.514591][ T283] usb 6-1: USB disconnect, device number 36 [ 653.572379][T12800] loop6: p1 < > p3 [ 653.589477][T12800] loop6: p3 size 134217728 extends beyond EOD, truncated [ 653.726103][ T298] udevd[298]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 653.726119][ T1116] udevd[1116]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 653.771979][ T1116] udevd[1116]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 653.784642][ T298] udevd[298]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 653.837231][T12808] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3704'. [ 653.846388][T12808] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3704'. [ 653.865920][T12808] fuse: Bad value for 'fd' [ 654.285943][T12836] syz.5.3709[12836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 654.286457][T12836] syz.5.3709[12836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 654.845817][T12836] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 654.893331][T12836] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 654.906281][T12836] EXT4-fs (loop5): 1 truncate cleaned up [ 654.912016][T12836] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,grpquota,,errors=continue [ 654.938989][T12847] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 655.644983][ T24] kauditd_printk_skb: 612 callbacks suppressed [ 655.645001][ T24] audit: type=1400 audit(631.105:53181): avc: denied { map_create } for pid=12850 comm="syz.6.3713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 655.817569][T12865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12865 comm=syz.5.3715 [ 656.006381][ T24] audit: type=1400 audit(631.105:53182): avc: denied { bpf } for pid=12850 comm="syz.6.3713" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 656.026541][ T24] audit: type=1400 audit(631.105:53183): avc: denied { map_read map_write } for pid=12850 comm="syz.6.3713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 656.072855][ T24] audit: type=1400 audit(631.321:53184): avc: denied { mounton } for pid=12857 comm="syz.2.3717" path="/526/file0" dev="tmpfs" ino=3113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 656.123357][ T24] audit: type=1400 audit(631.321:53185): avc: denied { mount } for pid=12857 comm="syz.2.3717" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 656.207286][ T24] audit: type=1400 audit(631.321:53186): avc: denied { unlink } for pid=12857 comm="syz.2.3717" name="#170" dev="tmpfs" ino=3119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 656.229756][ T24] audit: type=1400 audit(631.321:53187): avc: denied { mount } for pid=12857 comm="syz.2.3717" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 656.480874][ T24] audit: type=1400 audit(631.330:53188): avc: denied { write } for pid=12857 comm="syz.2.3717" name="dev" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 656.502642][ T24] audit: type=1400 audit(631.330:53189): avc: denied { add_name } for pid=12857 comm="syz.2.3717" name="fuse" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 656.523543][ T24] audit: type=1400 audit(631.330:53190): avc: denied { create } for pid=12857 comm="syz.2.3717" name="fuse" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 656.905271][ T1202] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 657.159188][T12888] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3724'. [ 657.168501][T12888] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3724'. [ 657.178700][T12888] fuse: Bad value for 'fd' [ 657.268973][ T931] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 657.963814][ T1202] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.985054][ T1202] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 657.994176][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.014838][ T1202] usb 3-1: config 0 descriptor?? [ 658.033371][T12899] syz.6.3726[12899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 658.033437][T12899] syz.6.3726[12899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 658.060413][ T1202] usb 3-1: bad CDC descriptors [ 658.098229][T12899] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 658.107656][T12899] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 658.136853][T12899] EXT4-fs (loop6): 1 truncate cleaned up [ 658.142523][T12899] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,grpquota,,errors=continue [ 658.263080][ T931] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 658.274347][ T931] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.277600][ T385] usb 3-1: USB disconnect, device number 44 [ 658.284301][ T931] usb 6-1: config 0 interface 0 has no altsetting 0 [ 658.296926][ T931] usb 6-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 658.325965][ T931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.391306][ T931] usb 6-1: config 0 descriptor?? [ 658.408493][T12909] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 658.705522][T12911] attempt to access beyond end of device [ 658.705522][T12911] loop6: rw=2049, want=234, limit=128 [ 658.730635][T12911] attempt to access beyond end of device [ 658.730635][T12911] loop6: rw=2049, want=1041, limit=128 [ 658.749678][T12911] attempt to access beyond end of device [ 658.749678][T12911] loop6: rw=0, want=242, limit=128 [ 658.760958][T12910] attempt to access beyond end of device [ 658.760958][T12910] loop6: rw=0, want=242, limit=128 [ 658.771669][T12910] buffer_io_error: 94 callbacks suppressed [ 658.771679][T12910] Buffer I/O error on dev loop6, logical block 241, async page read [ 658.785622][T12910] attempt to access beyond end of device [ 658.785622][T12910] loop6: rw=0, want=243, limit=128 [ 658.796442][T12910] Buffer I/O error on dev loop6, logical block 242, async page read [ 658.804524][T12910] attempt to access beyond end of device [ 658.804524][T12910] loop6: rw=0, want=244, limit=128 [ 658.815263][T12910] Buffer I/O error on dev loop6, logical block 243, async page read [ 658.823367][T12910] attempt to access beyond end of device [ 658.823367][T12910] loop6: rw=0, want=245, limit=128 [ 658.834218][T12910] Buffer I/O error on dev loop6, logical block 244, async page read [ 658.842296][T12910] attempt to access beyond end of device [ 658.842296][T12910] loop6: rw=0, want=246, limit=128 [ 658.853270][T12910] Buffer I/O error on dev loop6, logical block 245, async page read [ 658.861361][T12910] attempt to access beyond end of device [ 658.861361][T12910] loop6: rw=0, want=247, limit=128 [ 658.872468][T12910] Buffer I/O error on dev loop6, logical block 246, async page read [ 658.880584][T12910] attempt to access beyond end of device [ 658.880584][T12910] loop6: rw=0, want=248, limit=128 [ 658.891431][T12910] Buffer I/O error on dev loop6, logical block 247, async page read [ 658.899646][T12910] Buffer I/O error on dev loop6, logical block 248, async page read [ 658.908388][T12910] Buffer I/O error on dev loop6, logical block 241, async page read [ 658.918080][ T931] pantherlord 0003:0810:0002.0068: item fetching failed at offset 5/7 [ 658.921473][T12910] Buffer I/O error on dev loop6, logical block 242, async page read [ 658.927259][ T931] pantherlord 0003:0810:0002.0068: parse failed [ 658.941462][ T931] pantherlord: probe of 0003:0810:0002.0068 failed with error -22 [ 659.034478][T12920] loop8: p1 < > p3 [ 659.039583][T12920] loop8: p3 size 134217728 extends beyond EOD, truncated [ 659.164595][ T1116] udevd[1116]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 659.164685][ T298] udevd[298]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 659.278890][ T1116] udevd[1116]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 659.295594][ T298] udevd[298]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 659.831694][T12935] netlink: 'syz.2.3737': attribute type 3 has an invalid length. [ 659.848061][T12938] fuse: Bad value for 'fd' [ 659.929513][T12944] incfs: Can't find or create .index dir in ./file0 [ 659.936279][T12944] incfs: mount failed -14 [ 659.979959][T12946] FAULT_INJECTION: forcing a failure. [ 659.979959][T12946] name failslab, interval 1, probability 0, space 0, times 0 [ 659.992732][T12946] CPU: 0 PID: 12946 Comm: syz.6.3744 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 660.004102][T12946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 660.014156][T12946] Call Trace: [ 660.017444][T12946] __dump_stack+0x21/0x24 [ 660.021755][T12946] dump_stack_lvl+0x169/0x1d8 [ 660.026414][T12946] ? thaw_kernel_threads+0x220/0x220 [ 660.031678][T12946] ? show_regs_print_info+0x18/0x18 [ 660.036909][T12946] dump_stack+0x15/0x1c [ 660.041043][T12946] should_fail+0x3c1/0x510 [ 660.045526][T12946] ? __alloc_skb+0x9e/0x520 [ 660.050007][T12946] __should_failslab+0xa4/0xe0 [ 660.054747][T12946] should_failslab+0x9/0x20 [ 660.059229][T12946] kmem_cache_alloc+0x3d/0x2e0 [ 660.063967][T12946] ? audit_log_start+0x3b7/0x860 [ 660.068881][T12946] __alloc_skb+0x9e/0x520 [ 660.073189][T12946] ? kmem_cache_alloc+0x165/0x2e0 [ 660.078187][T12946] ? audit_log_start+0x3b7/0x860 [ 660.083132][T12946] audit_log_start+0x3df/0x860 [ 660.087872][T12946] ? ____kasan_slab_free+0x130/0x160 [ 660.093139][T12946] ? audit_serial+0x30/0x30 [ 660.097617][T12946] ? kstrtouint_from_user+0x1a0/0x200 [ 660.102967][T12946] ? kmem_cache_free+0x2ac/0x2d0 [ 660.107881][T12946] ? memset+0x35/0x40 [ 660.111839][T12946] audit_seccomp+0x62/0x160 [ 660.116319][T12946] __seccomp_filter+0xb4c/0x1990 [ 660.121232][T12946] ? proc_fail_nth_read+0x210/0x210 [ 660.126410][T12946] ? rw_verify_area+0x1c0/0x360 [ 660.131238][T12946] ? preempt_count_add+0x90/0x1b0 [ 660.136236][T12946] ? __secure_computing+0x290/0x290 [ 660.141411][T12946] ? vfs_write+0xac8/0xd60 [ 660.145824][T12946] ? __bpf_trace_kmem_free+0x6f/0x90 [ 660.151099][T12946] ? kernel_write+0x3c0/0x3c0 [ 660.155764][T12946] ? __kasan_check_write+0x14/0x20 [ 660.160853][T12946] ? mutex_lock+0x8c/0xe0 [ 660.165157][T12946] ? mutex_trylock+0xa0/0xa0 [ 660.169725][T12946] ? __fget_files+0x2c4/0x320 [ 660.174381][T12946] ? __kasan_check_write+0x14/0x20 [ 660.179470][T12946] ? fput_many+0x15a/0x1a0 [ 660.183866][T12946] ? __kasan_check_write+0x14/0x20 [ 660.188952][T12946] ? switch_fpu_return+0x197/0x340 [ 660.194038][T12946] __secure_computing+0xea/0x290 [ 660.198952][T12946] syscall_trace_enter+0xb5/0x170 [ 660.203952][T12946] syscall_enter_from_user_mode+0x20/0x30 [ 660.209650][T12946] do_syscall_64+0x13/0x40 [ 660.214049][T12946] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 660.219916][T12946] RIP: 0033:0x7f19ba22a929 [ 660.224320][T12946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.243903][T12946] RSP: 002b:00007f19b8893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000063 [ 660.252296][T12946] RAX: ffffffffffffffda RBX: 00007f19ba451fa0 RCX: 00007f19ba22a929 [ 660.260245][T12946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 660.268196][T12946] RBP: 00007f19b8893090 R08: 0000000000000000 R09: 0000000000000000 [ 660.276146][T12946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.284096][T12946] R13: 0000000000000000 R14: 00007f19ba451fa0 R15: 00007fff6f5eb998 [ 660.301786][ T385] usb 6-1: USB disconnect, device number 37 [ 660.382981][T12954] input: syz1 as /devices/virtual/input/input86 [ 660.468148][T12955] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 661.000537][ T24] kauditd_printk_skb: 591 callbacks suppressed [ 661.000547][ T24] audit: type=1400 audit(636.400:53780): avc: denied { bpf } for pid=12970 comm="syz.8.3754" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 661.008324][T12971] incfs: Can't find or create .index dir in ./file0 [ 661.033723][T12971] incfs: mount failed -14 [ 661.245728][ T24] audit: type=1400 audit(636.400:53781): avc: denied { map_create } for pid=12970 comm="syz.8.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 661.265688][ T24] audit: type=1400 audit(636.400:53782): avc: denied { bpf } for pid=12970 comm="syz.8.3754" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 661.282185][T12969] IPv6: NLM_F_CREATE should be specified when creating new route [ 661.288284][ T24] audit: type=1400 audit(636.400:53783): avc: denied { map_read map_write } for pid=12970 comm="syz.8.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 661.294074][T12969] IPv6: Can't replace route, no match found [ 661.350720][ T24] audit: type=1400 audit(636.400:53784): avc: denied { prog_load } for pid=12970 comm="syz.8.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 661.375138][ T24] audit: type=1400 audit(636.400:53785): avc: denied { perfmon } for pid=12970 comm="syz.8.3754" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 661.401403][ T24] audit: type=1400 audit(636.400:53786): avc: denied { mounton } for pid=12970 comm="syz.8.3754" path="/180/file0" dev="tmpfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 661.433292][ T24] audit: type=1400 audit(636.400:53787): avc: denied { mount } for pid=12970 comm="syz.8.3754" name="/" dev="9p" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 661.455466][ T24] audit: type=1400 audit(636.400:53788): avc: denied { mounton } for pid=12970 comm="syz.8.3754" path="/180/file0" dev="9p" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.498384][ T24] audit: type=1400 audit(636.400:53789): avc: denied { write } for pid=12970 comm="syz.8.3754" name="/" dev="9p" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 662.292112][T12986] loop8: p1 < > p3 [ 662.298374][T12986] loop8: p3 size 134217728 extends beyond EOD, truncated [ 662.349247][T13001] 9pnet: Insufficient options for proto=fd [ 662.374345][T13003] incfs: Can't find or create .index dir in ./file0 [ 662.381134][T13003] incfs: mount failed -14 [ 662.444339][T13005] usb usb9: usbfs: process 13005 (syz.2.3765) did not claim interface 15 before use [ 662.491303][ T486] udevd[486]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 662.503627][ T1116] udevd[1116]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 662.530995][T12996] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue [ 662.554484][T13014] incfs: Can't find or create .index dir in ./file0 [ 662.570491][T13014] incfs: mount failed -14 [ 662.945531][ T931] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 663.268291][ T931] usb 6-1: Using ep0 maxpacket: 32 [ 663.403826][ T931] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 663.422355][ T931] usb 6-1: config 0 has no interface number 0 [ 663.429801][ T931] usb 6-1: config 0 interface 184 has no altsetting 0 [ 663.608392][ T931] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 663.617470][ T931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.625905][ T931] usb 6-1: Product: syz [ 663.630249][ T931] usb 6-1: Manufacturer: syz [ 663.634870][ T931] usb 6-1: SerialNumber: syz [ 663.641145][ T931] usb 6-1: config 0 descriptor?? [ 663.683647][ T931] smsc75xx v1.0.0 [ 663.844574][T13033] loop8: p1 < > p3 [ 663.849457][T13033] loop8: p3 size 134217728 extends beyond EOD, truncated [ 663.930192][ T486] udevd[486]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 663.939614][T13037] incfs_lookup_dentry err:-5 [ 663.943822][ T1116] udevd[1116]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 663.945159][T13037] incfs: Can't find or create .index dir in ./file0 [ 663.961478][T13037] incfs: mount failed -5 [ 664.090600][T13041] incfs_lookup_dentry err:-5 [ 664.095231][T13041] incfs: Can't find or create .index dir in ./file0 [ 664.102355][T13041] incfs: mount failed -5 [ 664.538465][ T931] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 664.549387][ T931] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 664.957124][T13055] bridge: RTM_NEWNEIGH with invalid ether address [ 665.158695][ T931] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 665.174123][ T931] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 665.186678][ T931] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 665.196827][ T931] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 665.206966][ T931] usb 6-1: USB disconnect, device number 38 [ 665.695653][T13080] EXT4-fs (loop5): Test dummy encryption mode enabled [ 665.704024][T13080] EXT4-fs (loop5): Test dummy encryption mode enabled [ 665.716136][T13080] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 666.395843][ T24] kauditd_printk_skb: 515 callbacks suppressed [ 666.395854][ T24] audit: type=1400 audit(641.395:54305): avc: denied { execmem } for pid=13092 comm="syz.2.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 666.427723][ T24] audit: type=1400 audit(641.470:54306): avc: denied { prog_load } for pid=13089 comm="syz.0.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 666.450890][ T24] audit: type=1400 audit(641.470:54307): avc: denied { map_create } for pid=13089 comm="syz.0.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 666.477901][ T24] audit: type=1400 audit(641.470:54308): avc: denied { bpf } for pid=13089 comm="syz.0.3790" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 666.498323][ T24] audit: type=1400 audit(641.470:54309): avc: denied { map_read map_write } for pid=13089 comm="syz.0.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 666.793462][ T24] audit: type=1400 audit(641.470:54310): avc: denied { prog_load } for pid=13089 comm="syz.0.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 666.812213][ T24] audit: type=1400 audit(641.479:54311): avc: denied { bpf } for pid=13089 comm="syz.0.3790" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 666.837006][ T24] audit: type=1400 audit(641.479:54312): avc: denied { perfmon } for pid=13089 comm="syz.0.3790" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 666.869497][ T24] audit: type=1400 audit(641.488:54313): avc: denied { prog_run } for pid=13089 comm="syz.0.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 666.888253][ T24] audit: type=1400 audit(641.544:54314): avc: denied { read write } for pid=13089 comm="syz.0.3790" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 667.500826][T13103] F2FS-fs (loop6): Found nat_bits in checkpoint [ 667.533176][T13103] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 667.555401][T13103] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 667.748145][T13122] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3794'. [ 668.037913][T13128] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3798'. [ 668.067628][T13128] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3798'. [ 668.100739][T13128] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3798'. [ 668.920152][T13139] incfs_lookup_dentry err:-14 [ 668.924938][T13139] incfs: Can't find or create .incomplete dir in ./file0 [ 669.120890][T13139] incfs: mount failed -14 [ 670.055687][T13149] loop6: p1 < > p3 [ 670.060353][T13149] loop6: p3 size 134217728 extends beyond EOD, truncated [ 670.156295][T13150] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945) [ 670.167252][ T94] loop6: p1 < > p3 [ 670.178298][ T94] loop6: p3 size 134217728 extends beyond EOD, truncated [ 670.183249][T13150] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 670.200046][T13150] EXT4-fs (loop5): orphan cleanup on readonly fs [ 670.207853][T13150] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 670.217451][T13150] EXT4-fs error (device loop5): ext4_dirty_inode:6142: inode #3: comm syz.5.3806: mark_inode_dirty error [ 670.237113][T13150] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.3806: Invalid block bitmap block 3 in block_group 0 [ 670.270863][T13150] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 670.282111][T13150] EXT4-fs error (device loop5): ext4_dirty_inode:6142: inode #3: comm syz.5.3806: mark_inode_dirty error [ 670.328849][T13150] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 1: comm syz.5.3806: lblock 6 mapped to illegal pblock 1 (length 1) [ 670.357547][T13150] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 48: comm syz.5.3806: lblock 0 mapped to illegal pblock 48 (length 1) [ 670.373560][T13150] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.3806: Failed to acquire dquot type 0 [ 670.387331][T13150] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 49: comm syz.5.3806: lblock 1 mapped to illegal pblock 49 (length 1) [ 670.407417][T13150] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.3806: Failed to acquire dquot type 0 [ 670.419037][T13150] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 670.428544][T13150] EXT4-fs error (device loop5): ext4_evict_inode:283: inode #15: comm syz.5.3806: mark_inode_dirty error [ 670.440036][T13150] EXT4-fs warning (device loop5): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 670.450301][T13150] EXT4-fs (loop5): 1 orphan inode deleted [ 670.456199][T13150] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,inlinecrypt,usrjquota=,grpid,nobarrier,,errors=continue [ 670.585546][T13150] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #2: block 16: comm syz.5.3806: lblock 0 mapped to illegal pblock 16 (length 1) [ 670.595309][ T486] udevd[486]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 670.603404][ T298] udevd[298]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 670.609656][T13167] EXT4-fs (loop8): Test dummy encryption mode enabled [ 670.625979][T13167] EXT4-fs (loop8): Test dummy encryption mode enabled [ 670.644148][T13167] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 670.653745][ T298] udevd[298]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 670.660332][ T486] udevd[486]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 671.587791][T13182] incfs: Can't find or create .index dir in ./file0 [ 671.616044][T13182] incfs: mount failed -14 [ 671.995048][ T24] kauditd_printk_skb: 396 callbacks suppressed [ 671.995058][ T24] audit: type=1400 audit(646.455:54705): avc: denied { execmem } for pid=13186 comm="syz.2.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 672.020152][ T24] audit: type=1400 audit(646.680:54706): avc: denied { mounton } for pid=13147 comm="syz.5.3806" path="/154/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 672.284056][ T24] audit: type=1400 audit(646.680:54707): avc: denied { mount } for pid=13147 comm="syz.5.3806" name="/" dev="ramfs" ino=63934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 672.312229][ T24] audit: type=1400 audit(646.698:54708): avc: denied { map_create } for pid=13184 comm="syz.8.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 672.345827][ T24] audit: type=1400 audit(646.717:54709): avc: denied { prog_load } for pid=13184 comm="syz.8.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 672.364738][ T24] audit: type=1400 audit(646.727:54710): avc: denied { read write } for pid=5152 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.388479][ T24] audit: type=1400 audit(646.745:54711): avc: denied { open } for pid=5152 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.412108][ T24] audit: type=1400 audit(646.745:54712): avc: denied { ioctl } for pid=5152 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.438004][ T24] audit: type=1400 audit(646.783:54713): avc: denied { prog_load } for pid=13186 comm="syz.2.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 672.457118][ T24] audit: type=1400 audit(646.783:54714): avc: denied { bpf } for pid=13186 comm="syz.2.3818" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 672.659437][T13204] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 672.687414][T13216] tipc: Started in network mode [ 672.699836][T13216] tipc: Own node identity fe80000000000000000000000000001, cluster identity 4711 [ 672.727257][T13216] tipc: Enabled bearer , priority 10 [ 672.765990][T13219] EXT4-fs (loop5): Test dummy encryption mode enabled [ 672.781105][T13219] EXT4-fs (loop5): Test dummy encryption mode enabled [ 672.790836][T13224] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3825'. [ 672.800114][T13224] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3825'. [ 672.811178][T13224] fuse: Bad value for 'fd' [ 672.852060][T13219] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 674.829270][ T1202] tipc: 32-bit node address hash set to 100080fe [ 675.120413][T13238] loop6: p1 < > p3 [ 675.126279][T13238] loop6: p3 size 134217728 extends beyond EOD, truncated [ 676.249081][T13261] FAT-fs (loop6): Directory bread(block 64) failed [ 676.255752][T13261] FAT-fs (loop6): Directory bread(block 65) failed [ 676.262352][T13261] FAT-fs (loop6): Directory bread(block 66) failed [ 676.269086][T13261] FAT-fs (loop6): Directory bread(block 67) failed [ 676.275813][T13261] FAT-fs (loop6): Directory bread(block 68) failed [ 676.282391][T13261] FAT-fs (loop6): Directory bread(block 69) failed [ 676.289123][T13261] FAT-fs (loop6): Directory bread(block 70) failed [ 676.295640][T13261] FAT-fs (loop6): Directory bread(block 71) failed [ 676.302347][T13261] FAT-fs (loop6): Directory bread(block 72) failed [ 676.308930][T13261] FAT-fs (loop6): Directory bread(block 73) failed [ 676.734664][T13271] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3842'. [ 676.743755][T13271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3842'. [ 676.754317][T13271] fuse: Bad value for 'fd' [ 677.180597][T13278] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,delalloc,errors=remount-ro, [ 677.352066][ T24] kauditd_printk_skb: 419 callbacks suppressed [ 677.352077][ T24] audit: type=1400 audit(651.694:55134): avc: denied { read write } for pid=5152 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.380011][T13294] EXT4-fs (loop6): Unrecognized mount option "init_itable=0x0000000000000008.mb_optimize_scan=0x0000000000000000" or missing value [ 677.382485][ T24] audit: type=1400 audit(651.694:55135): avc: denied { open } for pid=5152 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.397208][T13290] EXT4-fs error (device loop5): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 677.434020][ T24] audit: type=1400 audit(651.694:55136): avc: denied { ioctl } for pid=5152 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.434927][T13290] EXT4-fs (loop5): Remounting filesystem read-only [ 677.477974][ T24] audit: type=1400 audit(651.712:55137): avc: denied { create } for pid=13293 comm="syz.6.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 677.498091][ T24] audit: type=1400 audit(651.712:55138): avc: denied { read write } for pid=13293 comm="syz.6.3850" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.522118][ T24] audit: type=1400 audit(651.712:55139): avc: denied { open } for pid=13293 comm="syz.6.3850" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.546131][ T24] audit: type=1400 audit(651.712:55140): avc: denied { ioctl } for pid=13293 comm="syz.6.3850" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.571565][ T24] audit: type=1400 audit(651.722:55141): avc: denied { mounton } for pid=13293 comm="syz.6.3850" path="/453/file0" dev="tmpfs" ino=2756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 677.594200][ T24] audit: type=1400 audit(651.796:55142): avc: denied { read write } for pid=13293 comm="syz.6.3850" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.618231][ T24] audit: type=1400 audit(651.796:55143): avc: denied { open } for pid=13293 comm="syz.6.3850" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.746315][T13338] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 679.997551][T13347] incfs: Can't find or create .index dir in ./file0 [ 680.096278][T13347] incfs: mount failed -14 [ 680.581537][T13357] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=24146 (48292 ns) > initial count (256 ns). Using initial count to start timer. [ 681.008648][T13357] F2FS-fs (loop5): invalid crc value [ 681.065199][T13357] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 681.252652][T13357] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 681.335882][T13377] handle_bad_sector: 2923 callbacks suppressed [ 681.335894][T13377] attempt to access beyond end of device [ 681.335894][T13377] loop5: rw=2049, want=45104, limit=40427 [ 681.389082][T13386] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3875'. [ 681.627381][T13390] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 681.667598][T13390] EXT4-fs error (device loop6): ext4_dirty_inode:6142: inode #16: comm syz.6.3877: mark_inode_dirty error [ 681.706575][T13390] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 681.732862][T13390] EXT4-fs error (device loop6): __ext4_ext_dirty:182: inode #16: comm syz.6.3877: mark_inode_dirty error [ 681.782410][T13390] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 681.811147][T13390] EXT4-fs error (device loop6) in ext4_orphan_del:3292: error 27 [ 681.836647][T13390] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 681.849669][T13390] EXT4-fs error (device loop6): ext4_truncate:4390: inode #16: comm syz.6.3877: mark_inode_dirty error [ 681.860811][T13399] netlink: 'syz.5.3879': attribute type 4 has an invalid length. [ 681.876910][T13399] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3879'. [ 681.888136][T13390] EXT4-fs error (device loop6) in ext4_orphan_cleanup:3108: error 27 [ 681.897357][T13390] EXT4-fs (loop6): 1 truncate cleaned up [ 681.903477][T13390] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 682.035316][T13399] EXT4-fs (loop5): Test dummy encryption mode enabled [ 682.053741][T13399] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 682.094169][T13399] EXT4-fs (loop5): 1 truncate cleaned up [ 682.099841][T13399] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,inode_readahead_blks=0x0000000001000000,,errors=continue [ 682.792601][ T24] kauditd_printk_skb: 474 callbacks suppressed [ 682.792613][ T24] audit: type=1400 audit(656.782:55618): avc: denied { read write } for pid=13416 comm="syz.0.3886" name="loop0" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.822918][ T24] audit: type=1400 audit(656.782:55619): avc: denied { open } for pid=13416 comm="syz.0.3886" path="/dev/loop0" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 683.147954][ T24] audit: type=1400 audit(656.782:55620): avc: denied { ioctl } for pid=13416 comm="syz.0.3886" path="/dev/loop0" dev="devtmpfs" ino=700 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 683.178981][ T24] audit: type=1400 audit(656.857:55621): avc: denied { map_create } for pid=13418 comm="syz.6.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.199426][ T24] audit: type=1400 audit(656.876:55622): avc: denied { bpf } for pid=13418 comm="syz.6.3885" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 683.225486][ T24] audit: type=1400 audit(656.876:55623): avc: denied { map_read map_write } for pid=13418 comm="syz.6.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.246330][ T24] audit: type=1400 audit(656.885:55624): avc: denied { prog_load } for pid=13418 comm="syz.6.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.265106][ T24] audit: type=1400 audit(656.885:55625): avc: denied { perfmon } for pid=13418 comm="syz.6.3885" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 683.289793][ T24] audit: type=1400 audit(656.894:55626): avc: denied { prog_run } for pid=13418 comm="syz.6.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.309750][ T24] audit: type=1400 audit(656.913:55627): avc: denied { create } for pid=13418 comm="syz.6.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 683.831808][T13435] FAT-fs (loop6): Directory bread(block 162) failed [ 683.852960][T13435] FAT-fs (loop6): Directory bread(block 163) failed [ 683.875096][T13435] FAT-fs (loop6): Directory bread(block 164) failed [ 683.882496][T13435] FAT-fs (loop6): Directory bread(block 165) failed [ 683.889170][T13435] FAT-fs (loop6): Directory bread(block 166) failed [ 683.896474][T13435] FAT-fs (loop6): Directory bread(block 167) failed [ 683.903463][T13435] FAT-fs (loop6): Directory bread(block 168) failed [ 683.910219][ T570] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 683.918740][T13435] FAT-fs (loop6): Directory bread(block 169) failed [ 684.004797][T13447] netlink: 'syz.5.3896': attribute type 32 has an invalid length. [ 684.027680][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3896'. [ 684.099678][T13451] FAT-fs (loop6): Directory bread(block 162) failed [ 684.106341][T13451] FAT-fs (loop6): Directory bread(block 163) failed [ 684.262622][ T570] usb 9-1: Using ep0 maxpacket: 32 [ 684.423143][ T570] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.434407][ T570] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.434660][T13447] EXT4-fs (loop5): Test dummy encryption mode enabled [ 684.444156][ T570] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 684.444174][ T570] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.466750][T13447] EXT4-fs (loop5): Test dummy encryption mode enabled [ 684.476673][ T570] usb 9-1: config 0 descriptor?? [ 684.486934][T13447] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,acl,stripe=0x0000000000000009,norecovery,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue [ 684.519711][ T570] hub 9-1:0.0: USB hub found [ 685.101393][T13469] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 685.133615][T13474] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 685.171405][ T570] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 685.278211][ T570] usbhid 9-1:0.0: can't add hid device: -71 [ 685.284216][ T570] usbhid: probe of 9-1:0.0 failed with error -71 [ 685.321995][ T570] usb 9-1: USB disconnect, device number 17 [ 685.385936][T13478] F2FS-fs (loop6): Unrecognized mount option "alloc_mQü%áN]kótÆ|¤ode=default" or missing value [ 685.799364][T13483] futex_wake_op: syz.2.3906 tries to shift op by 32; fix this program [ 685.933808][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3910'. [ 685.942795][T13494] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 686.325997][ T385] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 687.129164][ T385] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.227654][ T385] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.367795][ T385] usb 9-1: New USB device found, idVendor=056a, idProduct=dd0d, bcdDevice= 0.00 [ 687.721042][ T385] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.748430][ T385] usb 9-1: config 0 descriptor?? [ 688.225760][ T24] kauditd_printk_skb: 514 callbacks suppressed [ 688.256957][ T24] audit: type=1400 audit(661.665:56142): avc: denied { prog_load } for pid=13517 comm="syz.2.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 688.284979][ T24] audit: type=1400 audit(661.674:56143): avc: denied { map_create } for pid=13516 comm="syz.6.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 688.304382][ T24] audit: type=1400 audit(661.674:56144): avc: denied { bpf } for pid=13516 comm="syz.6.3918" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 688.378828][T13531] 9pnet: Insufficient options for proto=fd [ 688.389681][ T24] audit: type=1400 audit(661.674:56145): avc: denied { map_read map_write } for pid=13516 comm="syz.6.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 688.428787][ T24] audit: type=1400 audit(661.684:56146): avc: denied { mounton } for pid=13516 comm="syz.6.3918" path="/468/bus" dev="tmpfs" ino=2853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 688.458771][ T24] audit: type=1400 audit(661.684:56147): avc: denied { unlink } for pid=13516 comm="syz.6.3918" name="#1ae" dev="tmpfs" ino=2859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 688.484678][ T24] audit: type=1400 audit(661.702:56148): avc: denied { mount } for pid=13516 comm="syz.6.3918" name="/" dev="overlay" ino=2854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 688.509058][ T24] audit: type=1400 audit(661.908:56149): avc: denied { unmount } for pid=10493 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 688.529025][ T24] audit: type=1400 audit(661.908:56150): avc: denied { ioctl } for pid=13491 comm="syz.8.3909" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 688.553632][ T24] audit: type=1400 audit(661.908:56151): avc: denied { execute } for pid=13522 comm="syz.0.3919" dev="tmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 688.576009][ T385] wacom 0003:056A:DD0D.0069: unknown main item tag 0x0 [ 688.586669][T13536] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3923'. [ 688.595736][T13536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3923'. [ 688.606293][T13536] fuse: Bad value for 'fd' [ 688.637256][ T385] wacom 0003:056A:DD0D.0069: Unknown device_type for 'HID 056a:dd0d'. Ignoring. [ 688.925577][T13495] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 689.026168][T13544] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 689.260727][T13554] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3927'. [ 689.800343][ T9195] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 690.071429][ T9195] usb 6-1: Using ep0 maxpacket: 32 [ 690.083123][ T9391] usb 9-1: USB disconnect, device number 18 [ 690.117673][T13571] 9pnet: Insufficient options for proto=fd [ 690.393300][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3934'. [ 690.403977][T13578] device vlan2 entered promiscuous mode [ 690.409545][T13578] device syz_tun entered promiscuous mode [ 690.431337][ T9195] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.446364][ T9195] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.465619][ T9195] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.472368][ T9195] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 690.491759][ T9195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.514279][ T9195] usb 6-1: config 0 descriptor?? [ 690.604486][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3939'. [ 690.654355][T13593] incfs: Can't find or create .index dir in ./file0 [ 690.661138][T13593] incfs: mount failed -14 [ 691.031146][ T9195] wacom 0003:056A:0057.006A: item fetching failed at offset 5/6 [ 691.039470][ T9195] wacom 0003:056A:0057.006A: parse failed [ 691.045332][ T9195] wacom: probe of 0003:056A:0057.006A failed with error -22 [ 691.093908][ T9391] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 691.273342][ T385] usb 6-1: USB disconnect, device number 39 [ 691.521566][ T9391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.532854][ T9391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.545104][ T9391] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 691.555167][ T9391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.571298][ T9391] usb 3-1: config 0 descriptor?? [ 692.265292][T13628] fuse: Bad value for 'user_id' [ 692.279831][T13628] EXT4-fs (loop6): Test dummy encryption mode enabled [ 692.294867][T13628] EXT4-fs (loop6): Test dummy encryption mode enabled [ 692.305430][T13628] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 692.499878][T13638] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 692.570005][ T9391] hid-led 0003:27B8:01ED.006B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 692.594217][ T9391] hid-led 0003:27B8:01ED.006B: ThingM blink(1) initialized [ 692.847181][ T1202] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 692.855171][ T385] usb 3-1: USB disconnect, device number 45 [ 693.125105][ T1202] usb 7-1: Using ep0 maxpacket: 32 [ 693.253439][ T1202] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 693.261671][ T1202] usb 7-1: config 0 has no interface number 0 [ 693.267802][ T1202] usb 7-1: config 0 interface 184 has no altsetting 0 [ 693.322795][T13654] fuse: Bad value for 'fd' [ 693.332506][T13654] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 693.356299][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3960'. [ 693.366643][T13656] device vlan2 entered promiscuous mode [ 693.435265][ T1202] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 693.456023][ T1202] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.464982][ T1202] usb 7-1: Product: syz [ 693.469260][ T1202] usb 7-1: Manufacturer: syz [ 693.504806][ T1202] usb 7-1: SerialNumber: syz [ 693.512779][ T1202] usb 7-1: config 0 descriptor?? [ 693.553330][ T1202] smsc75xx v1.0.0 [ 693.575138][ T24] kauditd_printk_skb: 671 callbacks suppressed [ 693.575149][ T24] audit: type=1400 audit(666.875:56823): avc: denied { read write } for pid=10017 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.584565][T13668] incfs: Can't find or create .index dir in ./file0 [ 693.715599][T13672] overlayfs: failed to clone upperpath [ 693.744280][ T24] audit: type=1400 audit(666.875:56824): avc: denied { bpf } for pid=13667 comm="syz.2.3966" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 693.810147][T13668] incfs: mount failed -14 [ 693.861354][ T24] audit: type=1400 audit(666.875:56825): avc: denied { map_create } for pid=13667 comm="syz.2.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 693.882136][ T24] audit: type=1400 audit(666.875:56826): avc: denied { map_read map_write } for pid=13667 comm="syz.2.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 693.903636][ T24] audit: type=1400 audit(666.875:56827): avc: denied { prog_load } for pid=13667 comm="syz.2.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 693.922403][ T24] audit: type=1400 audit(666.875:56828): avc: denied { perfmon } for pid=13667 comm="syz.2.3966" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 693.998422][ T24] audit: type=1400 audit(666.875:56829): avc: denied { mounton } for pid=13667 comm="syz.2.3966" path="/590/file0" dev="tmpfs" ino=3513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 694.021354][ T24] audit: type=1400 audit(666.875:56830): avc: denied { mount } for pid=13667 comm="syz.2.3966" name="/" dev="9p" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 694.043705][ T24] audit: type=1400 audit(666.875:56831): avc: denied { mounton } for pid=13667 comm="syz.2.3966" path="/590/file0" dev="9p" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 694.074507][ T24] audit: type=1400 audit(666.875:56832): avc: denied { write } for pid=13667 comm="syz.2.3966" name="/" dev="9p" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 694.343927][ T1202] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 694.376054][ T1202] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 695.263465][ T1202] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 695.290460][ T1202] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 695.456196][ T1202] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 695.542323][ T1202] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 695.547993][T13699] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3975'. [ 695.573451][ T1202] usb 7-1: USB disconnect, device number 39 [ 696.114114][T13709] overlayfs: failed to clone upperpath [ 697.176950][T13723] F2FS-fs (loop5): Unrecognized mount option "alloc_mQü%áN]kótÆ|¤ode=default" or missing value [ 697.273039][ T283] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 697.775774][ T283] usb 9-1: Using ep0 maxpacket: 8 [ 697.914686][ T283] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.925011][ T283] usb 9-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 697.934229][ T283] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.944985][ T283] usb 9-1: config 0 descriptor?? [ 697.991457][ T283] uvcvideo: Found UVC 0.00 device (05a9:2640) [ 697.998517][ T283] uvcvideo: No valid video chain found. [ 698.053454][ T385] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 698.205109][ T570] usb 9-1: USB disconnect, device number 19 [ 698.320735][ T385] usb 6-1: Using ep0 maxpacket: 32 [ 698.459781][ T385] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 698.468033][ T385] usb 6-1: config 0 has no interface number 0 [ 698.474323][ T385] usb 6-1: config 0 interface 184 has no altsetting 0 [ 698.718172][T13759] overlayfs: failed to clone upperpath [ 698.827691][ T385] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 698.836778][ T385] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.844802][ T385] usb 6-1: Product: syz [ 698.848955][ T385] usb 6-1: Manufacturer: syz [ 698.853976][ T385] usb 6-1: SerialNumber: syz [ 698.859718][ T385] usb 6-1: config 0 descriptor?? [ 698.898846][ T385] smsc75xx v1.0.0 [ 698.933984][ T24] kauditd_printk_skb: 313 callbacks suppressed [ 698.933995][ T24] audit: type=1400 audit(671.879:57146): avc: denied { prog_load } for pid=13766 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 698.964411][ T24] audit: type=1400 audit(671.889:57147): avc: denied { execmem } for pid=13766 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 699.003195][ T24] audit: type=1400 audit(671.936:57148): avc: denied { read write } for pid=10017 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 699.027221][ T24] audit: type=1400 audit(671.936:57149): avc: denied { open } for pid=10017 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 699.051691][ T24] audit: type=1400 audit(671.936:57150): avc: denied { ioctl } for pid=10017 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 699.077149][ T24] audit: type=1400 audit(671.954:57151): avc: denied { map_create } for pid=13768 comm="syz.8.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 699.096006][ T24] audit: type=1400 audit(671.954:57152): avc: denied { perfmon } for pid=13768 comm="syz.8.4000" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 699.116891][ T24] audit: type=1400 audit(671.954:57153): avc: denied { map_read map_write } for pid=13768 comm="syz.8.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 699.136749][ T24] audit: type=1400 audit(671.992:57154): avc: denied { create } for pid=13768 comm="syz.8.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 699.158135][ T24] audit: type=1400 audit(671.992:57155): avc: denied { execmem } for pid=13768 comm="syz.8.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 699.242989][T13776] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4000'. [ 699.472086][T13779] overlayfs: failed to clone upperpath [ 699.477666][ T570] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 699.592954][ T385] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 699.598152][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4004'. [ 699.603868][ T385] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 699.612927][T13782] netlink: 'syz.0.4004': attribute type 1 has an invalid length. [ 699.629763][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4004'. [ 699.731936][ T570] usb 7-1: Using ep0 maxpacket: 32 [ 699.803652][T13787] overlayfs: failed to clone upperpath [ 699.860209][ T570] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 699.869423][ T570] usb 7-1: config 0 has no interface number 0 [ 699.876524][ T570] usb 7-1: config 0 interface 184 has no altsetting 0 [ 700.029802][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.036888][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.041949][ C1] ------------[ cut here ]------------ [ 700.044436][T13789] device bridge_slave_0 entered promiscuous mode [ 700.049403][ C1] refcount_t: addition on 0; use-after-free. [ 700.056862][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.061730][ C1] WARNING: CPU: 1 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 700.068705][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.077751][ C1] Modules linked in: [ 700.085222][T13789] device bridge_slave_1 entered promiscuous mode [ 700.088625][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 700.105849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 700.115947][ C1] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 700.122129][ C1] Code: 04 01 48 c7 c7 00 f8 1f 85 e8 d8 c7 31 02 0f 0b eb df e8 5f 5d 29 ff c6 05 3b 05 66 04 01 48 c7 c7 40 f7 1f 85 e8 bc c7 31 02 <0f> 0b eb c3 e8 43 5d 29 ff c6 05 20 05 66 04 01 48 c7 c7 a0 f7 1f [ 700.141293][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.141905][ C1] RSP: 0018:ffffc90000170a20 EFLAGS: 00010246 [ 700.148918][T13789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.149034][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.154961][ C1] [ 700.154972][ C1] RAX: e831998de4701300 RBX: 0000000000000002 RCX: ffff888100292780 [ 700.154978][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 700.154985][ C1] RBP: ffffc90000170a30 R08: 0000000000000004 R09: 0000000000000003 [ 700.154993][ C1] R10: fffff5200002e088 R11: 1ffff9200002e088 R12: ffff888126523808 [ 700.155007][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffc90000170be0 [ 700.162187][T13789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.169176][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 700.189487][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 700.195402][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 700.195409][ C1] CR2: 000020000057f000 CR3: 000000012d928000 CR4: 00000000003506a0 [ 700.195417][ C1] Call Trace: [ 700.195421][ C1] [ 700.195436][ C1] tipc_crypto_xmit+0x1927/0x23f0 [ 700.195453][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 700.265541][ C1] ? memcpy+0x56/0x70 [ 700.269556][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 700.274752][ C1] ? __skb_clone+0x469/0x780 [ 700.279345][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 700.284281][ C1] ? skb_clone+0x21c/0x380 [ 700.288695][ C1] tipc_disc_timeout+0x6a2/0x830 [ 700.293618][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 700.298817][ C1] ? iov_iter_get_pages+0x213/0x7a0 [ 700.304001][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 700.309198][ C1] call_timer_fn+0x38/0x290 [ 700.313689][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 700.318862][ C1] __run_timers+0x639/0x9a0 [ 700.323369][ C1] ? calc_index+0x200/0x200 [ 700.327851][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 700.332704][ C1] run_timer_softirq+0x6a/0xf0 [ 700.337454][ C1] __do_softirq+0x255/0x563 [ 700.341954][ C1] asm_call_irq_on_stack+0xf/0x20 [ 700.346967][ C1] [ 700.349878][ C1] do_softirq_own_stack+0x60/0x80 [ 700.354910][ C1] __irq_exit_rcu+0x128/0x150 [ 700.359566][ C1] irq_exit_rcu+0x9/0x10 [ 700.363805][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 700.369426][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 700.375405][ C1] RIP: 0010:default_idle+0x12/0x20 [ 700.380501][ C1] Code: 48 8b 7c 24 10 e8 6e 29 00 00 e9 71 ff ff ff e8 94 00 fb ff 00 00 cc cc 55 48 89 e5 0f 1f 44 00 00 0f 00 2d b0 4a 50 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 [ 700.400118][ C1] RSP: 0018:ffffc90000107d98 EFLAGS: 00000246 [ 700.406198][ C1] RAX: ffff8881f7100000 RBX: ffff888100292780 RCX: 00000000002cb142 [ 700.414151][ C1] RDX: 0000000000000001 RSI: ffffffff85200e60 RDI: ffffffff85200e20 [ 700.422120][ C1] RBP: ffffc90000107d98 R08: dffffc0000000000 R09: ffffed103ee2ae7b [ 700.430094][ C1] R10: ffffed103ee2ae7b R11: 1ffff1103ee2ae7a R12: 0000000000000001 [ 700.438066][ C1] R13: 1ffff110200524f0 R14: 0000000000000000 R15: dffffc0000000000 [ 700.446032][ C1] arch_cpu_idle+0xa/0x10 [ 700.450362][ C1] default_idle_call+0x71/0x1d0 [ 700.455203][ C1] do_idle+0x1df/0x530 [ 700.459282][ C1] ? irqentry_exit+0x30/0x60 [ 700.463854][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 700.469027][ C1] ? do_idle+0x6/0x530 [ 700.473100][ C1] cpu_startup_entry+0x18/0x20 [ 700.477857][ C1] start_secondary+0x2e9/0x3a0 [ 700.482637][ C1] secondary_startup_64_no_verify+0xad/0xbb [ 700.488516][ C1] ---[ end trace a03d6416f28e8074 ]--- [ 700.493988][ C1] ------------[ cut here ]------------ [ 700.499423][ C1] refcount_t: underflow; use-after-free. [ 700.505124][ C1] WARNING: CPU: 1 PID: 0 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 700.514224][ C1] Modules linked in: [ 700.518108][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 700.529033][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 700.539109][ C1] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 700.545277][ C1] Code: 04 01 48 c7 c7 40 f7 1f 85 e8 bc c7 31 02 0f 0b eb c3 e8 43 5d 29 ff c6 05 20 05 66 04 01 48 c7 c7 a0 f7 1f 85 e8 a0 c7 31 02 <0f> 0b eb a7 e8 27 5d 29 ff c6 05 01 05 66 04 01 48 c7 c7 c0 f6 1f [ 700.564887][ C1] RSP: 0018:ffffc90000170a20 EFLAGS: 00010246 [ 700.570962][ C1] RAX: e831998de4701300 RBX: 0000000000000003 RCX: ffff888100292780 [ 700.576465][ T385] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 700.578957][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 700.590605][ T385] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 700.597728][ C1] RBP: ffffc90000170a30 R08: dffffc0000000000 R09: fffff5200002e075 [ 700.607646][ T385] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 700.615335][ C1] R10: fffff5200002e075 R11: 1ffff9200002e074 R12: ffff888126523808 [ 700.615352][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000 [ 700.625142][ T385] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 700.632668][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 700.632676][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 700.632683][ C1] CR2: 000020000057f000 CR3: 000000012d928000 CR4: 00000000003506a0 [ 700.632689][ C1] Call Trace: [ 700.632693][ C1] [ 700.632715][ C1] tipc_crypto_xmit+0x1a71/0x23f0 [ 700.657295][ T385] usb 6-1: USB disconnect, device number 40 [ 700.662901][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 700.693032][ C1] ? memcpy+0x56/0x70 [ 700.697017][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 700.702210][ C1] ? __skb_clone+0x469/0x780 [ 700.706830][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 700.711772][ C1] ? skb_clone+0x21c/0x380 [ 700.716199][ C1] tipc_disc_timeout+0x6a2/0x830 [ 700.721125][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 700.726335][ C1] ? iov_iter_get_pages+0x213/0x7a0 [ 700.731524][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 700.736708][ C1] call_timer_fn+0x38/0x290 [ 700.741227][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 700.746416][ C1] __run_timers+0x639/0x9a0 [ 700.750931][ C1] ? calc_index+0x200/0x200 [ 700.755420][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 700.760273][ C1] run_timer_softirq+0x6a/0xf0 [ 700.765021][ C1] __do_softirq+0x255/0x563 [ 700.769534][ C1] asm_call_irq_on_stack+0xf/0x20 [ 700.774542][ C1] [ 700.777457][ C1] do_softirq_own_stack+0x60/0x80 [ 700.782489][ C1] __irq_exit_rcu+0x128/0x150 [ 700.787162][ C1] irq_exit_rcu+0x9/0x10 [ 700.791414][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 700.797030][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 700.803010][ C1] RIP: 0010:default_idle+0x12/0x20 [ 700.808110][ C1] Code: 48 8b 7c 24 10 e8 6e 29 00 00 e9 71 ff ff ff e8 94 00 fb ff 00 00 cc cc 55 48 89 e5 0f 1f 44 00 00 0f 00 2d b0 4a 50 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 [ 700.827722][ C1] RSP: 0018:ffffc90000107d98 EFLAGS: 00000246 [ 700.833806][ C1] RAX: ffff8881f7100000 RBX: ffff888100292780 RCX: 00000000002cb142 [ 700.841868][ C1] RDX: 0000000000000001 RSI: ffffffff85200e60 RDI: ffffffff85200e20 [ 700.849857][ C1] RBP: ffffc90000107d98 R08: dffffc0000000000 R09: ffffed103ee2ae7b [ 700.857845][ C1] R10: ffffed103ee2ae7b R11: 1ffff1103ee2ae7a R12: 0000000000000001 [ 700.865819][ C1] R13: 1ffff110200524f0 R14: 0000000000000000 R15: dffffc0000000000 [ 700.873785][ C1] arch_cpu_idle+0xa/0x10 [ 700.878127][ C1] default_idle_call+0x71/0x1d0 [ 700.882968][ C1] do_idle+0x1df/0x530 [ 700.887045][ C1] ? irqentry_exit+0x30/0x60 [ 700.891629][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 700.896822][ C1] ? do_idle+0x6/0x530 [ 700.900906][ C1] cpu_startup_entry+0x18/0x20 [ 700.905657][ C1] start_secondary+0x2e9/0x3a0 [ 700.910452][ C1] secondary_startup_64_no_verify+0xad/0xbb [ 700.916357][ C1] ---[ end trace a03d6416f28e8075 ]--- [ 700.921902][ C1] ------------[ cut here ]------------ [ 700.927361][ C1] refcount_t: saturated; leaking memory. [ 700.933079][ C1] WARNING: CPU: 1 PID: 0 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 700.942188][ C1] Modules linked in: [ 700.946210][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 700.957599][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 700.967706][ C1] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 700.973872][ C1] Code: 04 01 48 c7 c7 c0 f6 1f 85 e8 84 c7 31 02 0f 0b eb 8b e8 0b 5d 29 ff c6 05 e6 04 66 04 01 48 c7 c7 c0 f6 1f 85 e8 68 c7 31 02 <0f> 0b e9 6c ff ff ff e8 ec 5c 29 ff c6 05 cb 04 66 04 01 48 c7 c7 [ 700.993496][ C1] RSP: 0018:ffffc90000170a20 EFLAGS: 00010246 [ 700.999554][ C1] RAX: e831998de4701300 RBX: 0000000000000001 RCX: ffff888100292780 [ 701.007540][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 701.015521][ C1] RBP: ffffc90000170a30 R08: dffffc0000000000 R09: fffff5200002e075 [ 701.023487][ C1] R10: fffff5200002e075 R11: 1ffff9200002e074 R12: ffff888126523808 [ 701.031586][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90000170be0 [ 701.039578][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 701.048508][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.055075][ C1] CR2: 000020000057f000 CR3: 000000012d928000 CR4: 00000000003506a0 [ 701.063071][ C1] Call Trace: [ 701.066339][ C1] [ 701.069198][ C1] tipc_crypto_xmit+0x1927/0x23f0 [ 701.074223][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 701.079425][ C1] ? memcpy+0x56/0x70 [ 701.083397][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 701.088582][ C1] ? __skb_clone+0x469/0x780 [ 701.093238][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 701.098168][ C1] ? skb_clone+0x21c/0x380 [ 701.102592][ C1] tipc_disc_timeout+0x6a2/0x830 [ 701.107514][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 701.112715][ C1] ? iov_iter_get_pages+0x213/0x7a0 [ 701.117911][ C1] ? __kasan_check_write+0x14/0x20 [ 701.123028][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 701.128044][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 701.133596][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 701.138798][ C1] call_timer_fn+0x38/0x290 [ 701.143341][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 701.148544][ C1] __run_timers+0x639/0x9a0 [ 701.153057][ C1] ? calc_index+0x200/0x200 [ 701.157593][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 701.162454][ C1] run_timer_softirq+0x6a/0xf0 [ 701.167267][ C1] __do_softirq+0x255/0x563 [ 701.171961][ C1] asm_call_irq_on_stack+0xf/0x20 [ 701.177017][ C1] [ 701.179964][ C1] do_softirq_own_stack+0x60/0x80 [ 701.184989][ C1] __irq_exit_rcu+0x128/0x150 [ 701.189701][ C1] irq_exit_rcu+0x9/0x10 [ 701.193942][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 701.199610][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 701.205602][ C1] RIP: 0010:default_idle+0x12/0x20 [ 701.210736][ C1] Code: 48 8b 7c 24 10 e8 6e 29 00 00 e9 71 ff ff ff e8 94 00 fb ff 00 00 cc cc 55 48 89 e5 0f 1f 44 00 00 0f 00 2d b0 4a 50 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 [ 701.230370][ C1] RSP: 0018:ffffc90000107d98 EFLAGS: 00000246 [ 701.236436][ C1] RAX: ffff8881f7100000 RBX: ffff888100292780 RCX: 00000000002cb142 [ 701.244438][ C1] RDX: 0000000000000001 RSI: ffffffff85200e60 RDI: ffffffff85200e20 [ 701.252430][ C1] RBP: ffffc90000107d98 R08: dffffc0000000000 R09: ffffed103ee2ae7b [ 701.260414][ C1] R10: ffffed103ee2ae7b R11: 1ffff1103ee2ae7a R12: 0000000000000001 [ 701.268414][ C1] R13: 1ffff110200524f0 R14: 0000000000000000 R15: dffffc0000000000 [ 701.273909][T13798] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 701.276417][ C1] arch_cpu_idle+0xa/0x10 [ 701.289714][ C1] default_idle_call+0x71/0x1d0 [ 701.294604][ C1] do_idle+0x1df/0x530 [ 701.298664][ C1] ? irqentry_exit+0x30/0x60 [ 701.303246][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 701.308482][ C1] ? do_idle+0x6/0x530 [ 701.312554][ C1] cpu_startup_entry+0x18/0x20 [ 701.317374][ C1] start_secondary+0x2e9/0x3a0 [ 701.322148][ C1] secondary_startup_64_no_verify+0xad/0xbb [ 701.328078][ C1] ---[ end trace a03d6416f28e8076 ]--- [ 701.334355][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.336314][ T570] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 701.360811][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.437585][ T570] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.577653][T13803] FAT-fs (loop8): Directory bread(block 64) failed [ 701.584514][T13803] FAT-fs (loop8): Directory bread(block 65) failed [ 701.591203][T13803] FAT-fs (loop8): Directory bread(block 66) failed [ 701.597814][T13803] FAT-fs (loop8): Directory bread(block 67) failed [ 701.604707][T13803] FAT-fs (loop8): Directory bread(block 68) failed [ 701.611411][T13803] FAT-fs (loop8): Directory bread(block 69) failed [ 701.618097][T13803] FAT-fs (loop8): Directory bread(block 70) failed [ 701.624661][T13803] FAT-fs (loop8): Directory bread(block 71) failed [ 701.631313][T13803] FAT-fs (loop8): Directory bread(block 72) failed [ 701.637921][T13803] FAT-fs (loop8): Directory bread(block 73) failed [ 702.310455][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 702.331341][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.338395][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.361830][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 702.371096][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.378149][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.394625][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 702.395441][ T570] usb 7-1: Product: syz [ 702.409579][ T570] usb 7-1: Manufacturer: syz [ 702.418975][ T570] usb 7-1: SerialNumber: syz [ 702.424828][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 702.432851][ T570] usb 7-1: config 0 descriptor?? [ 702.442035][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 702.452646][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 702.460708][ T570] usb 7-1: can't set config #0, error -71 [ 702.474842][ T570] usb 7-1: USB disconnect, device number 40 [ 702.616309][T13807] netlink: 'syz.5.4009': attribute type 4 has an invalid length. [ 703.651187][T13789] device veth0_vlan entered promiscuous mode [ 703.718065][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 703.738914][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 703.749381][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 703.757845][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 703.766563][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 703.775010][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 703.868164][T13789] device veth1_macvtap entered promiscuous mode [ 703.876729][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 703.885014][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 703.893239][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 703.903688][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 703.912525][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 704.175023][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 704.183754][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 704.286959][ T24] kauditd_printk_skb: 243 callbacks suppressed [ 704.286968][ T24] audit: type=1400 audit(676.893:57399): avc: denied { create } for pid=13833 comm="syz.5.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 704.313261][ T24] audit: type=1400 audit(676.893:57400): avc: denied { execmem } for pid=13833 comm="syz.5.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 704.405419][ T3759] tipc: Disabling bearer [ 704.410678][ T3759] tipc: Disabling bearer [ 704.416919][ T3759] tipc: Left network mode [ 704.490626][ T3759] ------------[ cut here ]------------ [ 704.496161][ T24] audit: type=1400 audit(677.080:57401): avc: denied { prog_load } for pid=13833 comm="syz.5.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 704.514943][ T3759] refcount_t: saturated; leaking memory. [ 704.522241][ T3759] WARNING: CPU: 0 PID: 3759 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 704.533309][ T3759] Modules linked in: [ 704.537708][ T3759] CPU: 0 PID: 3759 Comm: kworker/u4:6 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 704.546336][ T24] audit: type=1400 audit(677.080:57402): avc: denied { bpf } for pid=13833 comm="syz.5.4017" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 704.563439][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 704.580231][ T3759] Workqueue: netns cleanup_net [ 704.586773][ T3759] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 704.593162][ T3759] Code: 04 01 48 c7 c7 a0 f7 1f 85 e8 a0 c7 31 02 0f 0b eb a7 e8 27 5d 29 ff c6 05 01 05 66 04 01 48 c7 c7 c0 f6 1f 85 e8 84 c7 31 02 <0f> 0b eb 8b e8 0b 5d 29 ff c6 05 e6 04 66 04 01 48 c7 c7 c0 f6 1f [ 704.665755][ T24] audit: type=1400 audit(677.080:57403): avc: denied { perfmon } for pid=13833 comm="syz.5.4017" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 704.794936][ T3759] RSP: 0018:ffffc90000ec77c0 EFLAGS: 00010246 [ 704.805641][ T24] audit: type=1400 audit(677.230:57404): avc: denied { map_create } for pid=13838 comm="syz.0.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 704.847575][ T3759] RAX: c2f0636d4513fa00 RBX: 0000000000000000 RCX: ffff88811d520000 [ 704.872166][ T3759] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 704.889283][ T3759] RBP: ffffc90000ec77d0 R08: dffffc0000000000 R09: ffffed103ee0a5f8 [ 704.897519][ T24] audit: type=1400 audit(677.230:57405): avc: denied { perfmon } for pid=13838 comm="syz.0.4018" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 704.905138][ T3759] R10: ffffed103ee0a5f8 R11: 1ffff1103ee0a5f7 R12: 1ffff920001d8f04 [ 704.937109][ T3759] R13: ffff88812e951344 R14: 0000000000000000 R15: 0000000000000cc0 [ 704.958558][ T3759] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 704.969370][ T24] audit: type=1400 audit(677.230:57406): avc: denied { map_read map_write } for pid=13838 comm="syz.0.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 704.980809][ T3759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.016923][ T24] audit: type=1400 audit(677.258:57407): avc: denied { unmount } for pid=5152 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 705.017960][ T3759] CR2: 0000001b2f51dff8 CR3: 0000000125b90000 CR4: 00000000003506b0 [ 705.071182][ T3759] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 705.086947][ T3759] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 705.095306][ T24] audit: type=1400 audit(677.277:57408): avc: denied { create } for pid=13838 comm="syz.0.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 705.101658][ T3759] Call Trace: [ 705.137608][ T3759] nf_nat_masq_schedule+0x421/0x490 [ 705.158947][ T3759] ? __kasan_check_write+0x14/0x20 [ 705.174726][ T3759] ? nf_nat_masq_schedule+0x490/0x490 [ 705.190161][ T3759] ? masq_device_event+0xd0/0xd0 [ 705.202493][ T3759] ? nfqnl_rcv_dev_event+0x441/0x470 [ 705.215815][T13847] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4018'. [ 705.233035][ T3759] ? rtnl_is_locked+0x15/0x20 [ 705.238332][ T3759] masq_device_event+0x9b/0xd0 [ 705.243155][ T3759] raw_notifier_call_chain+0x90/0x100 [ 705.249250][ T3759] dev_close_many+0x330/0x4d0 [ 705.254058][ T3759] ? slab_free_freelist_hook+0xc5/0x190 [ 705.260073][ T3759] ? __dev_open+0x4c0/0x4c0 [ 705.265038][ T3759] ? __kasan_check_read+0x11/0x20 [ 705.265078][T13849] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 705.270375][ T3759] unregister_netdevice_many+0x44c/0x1980 [ 705.284120][ T3759] ? kobject_put+0x214/0x270 [ 705.288248][T13847] fuse: Bad value for 'fd' [ 705.288750][ T3759] ? alloc_netdev_mqs+0xc80/0xc80 [ 705.298681][ T3759] ? unregister_netdevice_queue+0x1aa/0x360 [ 705.304748][ T3759] ? list_netdevice+0x4c0/0x4c0 [ 705.309692][ T3759] ? find_next_bit+0xc9/0x100 [ 705.314604][ T3759] ? __kasan_check_write+0x14/0x20 [ 705.316548][T13849] EXT4-fs (loop5): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 705.319744][ T3759] ip6_tnl_exit_batch_net+0x3cc/0x410 [ 705.334447][ T3759] ? ip6_tnl_init_net+0x3a0/0x3a0 [ 705.339465][ T3759] ? ip6_tnl_init_net+0x3a0/0x3a0 [ 705.344583][ T3759] cleanup_net+0x5fb/0xb70 [ 705.348991][ T3759] ? __kasan_check_write+0x14/0x20 [ 705.354095][ T3759] ? ops_init+0x4a0/0x4a0 [ 705.358488][ T3759] ? read_word_at_a_time+0x12/0x20 [ 705.363592][ T3759] ? strscpy+0x9b/0x290 [ 705.367759][ T3759] process_one_work+0x6e1/0xba0 [ 705.373041][ T3759] worker_thread+0xa6a/0x13b0 [ 705.377794][ T3759] kthread+0x346/0x3d0 [ 705.381860][ T3759] ? worker_clr_flags+0x190/0x190 [ 705.386883][ T3759] ? kthread_blkcg+0xd0/0xd0 [ 705.391570][ T3759] ret_from_fork+0x1f/0x30 [ 705.395982][ T3759] ---[ end trace a03d6416f28e8077 ]--- [ 706.537620][ T3759] device bridge_slave_0 left promiscuous mode [ 706.544143][ T3759] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.618210][T13857] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 706.637260][T13857] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 706.649272][T13857] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 706.701330][T13869] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:0:5efe:253.127.26.154 [ 706.903604][T13871] EXT4-fs (loop8): Test dummy encryption mode enabled [ 706.918825][T13871] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4027: inode #1: comm syz.8.4027: iget: illegal inode # [ 706.948511][T13876] EXT4-fs (loop6): Test dummy encryption mode enabled [ 706.955331][T13876] EXT4-fs (loop6): Test dummy encryption mode enabled [ 707.045905][T13871] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4027: error while reading EA inode 1 err=-117 [ 707.079883][T13876] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 707.081846][T13871] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4027: inode #1: comm syz.8.4027: iget: illegal inode # [ 707.107547][T13871] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4027: error while reading EA inode 1 err=-117 [ 707.120622][T13871] EXT4-fs (loop8): 1 orphan inode deleted [ 707.126365][T13871] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue [ 707.557500][ T931] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 708.049441][ T931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 708.120181][T13892] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4031'. [ 708.250930][ T931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.263624][ T931] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 708.313622][ T931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.323210][ T931] usb 9-1: config 0 descriptor?? [ 709.078040][T13908] bridge0: port 3(ip6gretap1) entered blocking state [ 709.084904][T13908] bridge0: port 3(ip6gretap1) entered disabled state [ 709.092981][T13908] device ip6gretap1 entered promiscuous mode [ 709.375952][ T931] savu 0003:1E7D:2D5A.006C: unknown main item tag 0x0 [ 709.382759][ T931] savu 0003:1E7D:2D5A.006C: unknown main item tag 0x0 [ 709.389944][ T931] savu 0003:1E7D:2D5A.006C: unknown main item tag 0x0 [ 709.396768][ T931] savu 0003:1E7D:2D5A.006C: unknown main item tag 0x0 [ 709.403687][ T931] savu 0003:1E7D:2D5A.006C: unknown main item tag 0x0 [ 709.411766][ T54] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 709.432520][ T931] savu 0003:1E7D:2D5A.006C: unbalanced collection at end of report description [ 709.490605][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4038'. [ 709.491228][ T931] savu 0003:1E7D:2D5A.006C: parse failed [ 709.514686][T13920] netlink: 'syz.2.4038': attribute type 1 has an invalid length. [ 709.522435][T13920] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4038'. [ 709.558175][ T931] savu: probe of 0003:1E7D:2D5A.006C failed with error -22 [ 709.588882][ T3759] ================================================================== [ 709.596978][ T3759] BUG: KASAN: use-after-free in tcp_net_metrics_exit_batch+0x93/0x1a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 709.605119][ T3759] Read of size 4 at addr ffff88812e951344 by task kworker/u4:6/3759 [ 709.613077][ T3759] [ 709.615401][ T3759] CPU: 1 PID: 3759 Comm: kworker/u4:6 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 709.626834][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 709.636899][ T3759] Workqueue: netns cleanup_net [ 709.641657][ T3759] Call Trace: [ 709.644944][ T3759] __dump_stack+0x21/0x24 [ 709.649258][ T3759] dump_stack_lvl+0x169/0x1d8 [ 709.653924][ T3759] ? show_regs_print_info+0x18/0x18 [ 709.659107][ T3759] ? thaw_kernel_threads+0x220/0x220 [ 709.664373][ T3759] ? __irq_exit_rcu+0x40/0x150 [ 709.669122][ T3759] ? irq_exit_rcu+0x9/0x10 [ 709.673529][ T3759] print_address_description+0x7f/0x2c0 [ 709.679068][ T3759] ? tcp_net_metrics_exit_batch+0x93/0x1a0 [ 709.684857][ T3759] kasan_report+0xe2/0x130 [ 709.689262][ T3759] ? tcp_net_metrics_exit_batch+0x93/0x1a0 [ 709.695054][ T3759] kasan_check_range+0x280/0x290 [ 709.699982][ T3759] __kasan_check_read+0x11/0x20 [ 709.704820][ T3759] tcp_net_metrics_exit_batch+0x93/0x1a0 [ 709.710441][ T3759] ? tcp_net_metrics_init+0x120/0x120 [ 709.715804][ T3759] cleanup_net+0x5fb/0xb70 [ 709.720205][ T3759] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 709.725822][ T3759] ? ops_init+0x4a0/0x4a0 [ 709.730143][ T3759] process_one_work+0x6e1/0xba0 [ 709.734986][ T3759] worker_thread+0xa6a/0x13b0 [ 709.739659][ T3759] kthread+0x346/0x3d0 [ 709.743708][ T3759] ? worker_clr_flags+0x190/0x190 [ 709.748716][ T3759] ? kthread_blkcg+0xd0/0xd0 [ 709.753290][ T3759] ret_from_fork+0x1f/0x30 [ 709.757678][ T3759] [ 709.759982][ T3759] Allocated by task 3416: [ 709.764288][ T3759] __kasan_slab_alloc+0xbd/0xf0 [ 709.769113][ T3759] slab_post_alloc_hook+0x5d/0x2f0 [ 709.774199][ T3759] kmem_cache_alloc+0x165/0x2e0 [ 709.779026][ T3759] copy_net_ns+0x13f/0x520 [ 709.783416][ T3759] create_new_namespaces+0x3a2/0x650 [ 709.788681][ T3759] unshare_nsproxy_namespaces+0x120/0x170 [ 709.794375][ T3759] ksys_unshare+0x4ac/0x7d0 [ 709.798849][ T3759] __x64_sys_unshare+0x38/0x40 [ 709.803595][ T3759] do_syscall_64+0x31/0x40 [ 709.807985][ T3759] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 709.813845][ T3759] [ 709.816146][ T3759] Freed by task 3759: [ 709.820100][ T3759] kasan_set_track+0x4a/0x70 [ 709.824665][ T3759] kasan_set_free_info+0x23/0x40 [ 709.829601][ T3759] ____kasan_slab_free+0x125/0x160 [ 709.834684][ T3759] __kasan_slab_free+0x11/0x20 [ 709.839418][ T3759] slab_free_freelist_hook+0xc5/0x190 [ 709.844762][ T3759] kmem_cache_free+0x100/0x2d0 [ 709.849516][ T3759] cleanup_net+0xae3/0xb70 [ 709.853908][ T3759] process_one_work+0x6e1/0xba0 [ 709.858735][ T3759] worker_thread+0xa6a/0x13b0 [ 709.863386][ T3759] kthread+0x346/0x3d0 [ 709.867437][ T3759] ret_from_fork+0x1f/0x30 [ 709.871830][ T3759] [ 709.874148][ T3759] The buggy address belongs to the object at ffff88812e951340 [ 709.874148][ T3759] which belongs to the cache net_namespace of size 4672 [ 709.888443][ T3759] The buggy address is located 4 bytes inside of [ 709.888443][ T3759] 4672-byte region [ffff88812e951340, ffff88812e952580) [ 709.901600][ T3759] The buggy address belongs to the page: [ 709.907212][ T3759] page:ffffea0004ba5400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812e954d00 pfn:0x12e950 [ 709.918718][ T3759] head:ffffea0004ba5400 order:3 compound_mapcount:0 compound_pincount:0 [ 709.927028][ T3759] flags: 0x4000000000010200(slab|head) [ 709.932472][ T3759] raw: 4000000000010200 ffffea0004c27c00 0000000200000002 ffff888107fddb00 [ 709.941056][ T3759] raw: ffff88812e954d00 0000000080060004 00000001ffffffff 0000000000000000 [ 709.949617][ T3759] page dumped because: kasan: bad access detected [ 709.956013][ T3759] page_owner tracks the page as allocated [ 709.961713][ T3759] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1176, ts 54062400982, free_ts 54057966067 [ 709.982169][ T3759] prep_new_page+0x179/0x180 [ 709.986742][ T3759] get_page_from_freelist+0x2235/0x23d0 [ 709.992261][ T3759] __alloc_pages_nodemask+0x268/0x5f0 [ 709.997636][ T3759] new_slab+0x84/0x3f0 [ 710.001694][ T3759] ___slab_alloc+0x2a6/0x450 [ 710.006265][ T3759] __slab_alloc+0x63/0xa0 [ 710.010574][ T3759] kmem_cache_alloc+0x1af/0x2e0 [ 710.015396][ T3759] copy_net_ns+0x13f/0x520 [ 710.019784][ T3759] create_new_namespaces+0x3a2/0x650 [ 710.025040][ T3759] unshare_nsproxy_namespaces+0x120/0x170 [ 710.030741][ T3759] ksys_unshare+0x4ac/0x7d0 [ 710.035216][ T3759] __x64_sys_unshare+0x38/0x40 [ 710.039952][ T3759] do_syscall_64+0x31/0x40 [ 710.044344][ T3759] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 710.050203][ T3759] page last free stack trace: [ 710.054856][ T3759] __free_pages_ok+0x7fc/0x820 [ 710.059591][ T3759] __free_pages+0xdd/0x380 [ 710.063981][ T3759] __free_slab+0xcf/0x190 [ 710.068282][ T3759] unfreeze_partials+0x15f/0x190 [ 710.073190][ T3759] put_cpu_partial+0xc1/0x180 [ 710.077847][ T3759] __slab_free+0x2c9/0x3a0 [ 710.082236][ T3759] ___cache_free+0x111/0x130 [ 710.086804][ T3759] qlink_free+0x50/0x90 [ 710.091028][ T3759] qlist_free_all+0x5f/0xb0 [ 710.095503][ T3759] kasan_quarantine_reduce+0x14a/0x160 [ 710.100936][ T3759] __kasan_slab_alloc+0x2f/0xf0 [ 710.105758][ T3759] slab_post_alloc_hook+0x5d/0x2f0 [ 710.110848][ T3759] kmem_cache_alloc+0x165/0x2e0 [ 710.115674][ T3759] getname_flags+0xb9/0x500 [ 710.120152][ T3759] getname+0x19/0x20 [ 710.124019][ T3759] do_sys_openat2+0xd9/0x6d0 [ 710.128586][ T3759] [ 710.130898][ T3759] Memory state around the buggy address: [ 710.136514][ T3759] ffff88812e951200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 710.144551][ T3759] ffff88812e951280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 710.152587][ T3759] >ffff88812e951300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 710.160618][ T3759] ^ [ 710.166748][ T3759] ffff88812e951380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 710.174783][ T3759] ffff88812e951400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 710.182820][ T3759] ================================================================== [ 710.190853][ T3759] Disabling lock debugging due to kernel taint [ 710.208820][ T24] kauditd_printk_skb: 332 callbacks suppressed [ 710.208829][ T24] audit: type=1400 audit(681.963:57741): avc: denied { prog_load } for pid=13921 comm="syz.0.4040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 710.263382][ T931] usb 9-1: USB disconnect, device number 20 [ 710.350876][ T24] audit: type=1400 audit(681.963:57742): avc: denied { bpf } for pid=13921 comm="syz.0.4040" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 710.373541][ T24] audit: type=1400 audit(681.963:57743): avc: denied { perfmon } for pid=13921 comm="syz.0.4040" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 710.395005][ T24] audit: type=1400 audit(682.421:57744): avc: denied { prog_run } for pid=13921 comm="syz.0.4040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 710.413633][ T24] audit: type=1400 audit(682.431:57745): avc: denied { mount } for pid=13921 comm="syz.0.4040" name="/" dev="ramfs" ino=66168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 710.436335][ T24] audit: type=1400 audit(682.459:57746): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 710.458188][ T24] audit: type=1400 audit(682.459:57747): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.479391][ T24] audit: type=1400 audit(682.459:57748): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.500469][ T24] audit: type=1400 audit(682.459:57749): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.527995][ T24] audit: type=1400 audit(682.459:57750): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 710.572848][ T3759] tipc: Disabling bearer [ 710.577970][ T3759] tipc: Left network mode [ 710.668418][ T54] usb 7-1: device descriptor read/all, error -71 [ 711.287686][ T3759] device bridge_slave_1 left promiscuous mode [ 711.293895][ T3759] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.301518][ T3759] device bridge_slave_0 left promiscuous mode [ 711.307609][ T3759] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.315421][ T3759] device veth1_macvtap left promiscuous mode [ 711.321521][ T3759] device veth0_vlan left promiscuous mode [ 711.757421][ T3759] tipc: Disabling bearer [ 711.762531][ T3759] tipc: Disabling bearer [ 711.767918][ T3759] tipc: Left network mode [ 711.929116][ T3759] device ip6gretap1 left promiscuous mode [ 711.934908][ T3759] bridge0: port 3(ip6gretap1) entered disabled state [ 712.667181][ T3759] device bridge_slave_1 left promiscuous mode [ 712.673343][ T3759] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.680753][ T3759] device bridge_slave_0 left promiscuous mode [ 712.686874][ T3759] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.694689][ T3759] device bridge_slave_1 left promiscuous mode [ 712.700840][ T3759] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.708268][ T3759] device bridge_slave_0 left promiscuous mode [ 712.714467][ T3759] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.722370][ T3759] device bridge_slave_1 left promiscuous mode [ 712.728456][ T3759] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.735922][ T3759] device bridge_slave_0 left promiscuous mode [ 712.742017][ T3759] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.750287][ T3759] device veth1_macvtap left promiscuous mode [ 712.756363][ T3759] device veth0_vlan left promiscuous mode [ 712.762244][ T3759] device veth1_macvtap left promiscuous mode [ 712.768371][ T3759] device veth0_vlan left promiscuous mode